Nowrozy, Raza (2024) A Security and Privacy Compliant Data Sharing Solution For Healthcare Data Ecosystems. PhD thesis, Victoria University.

Abstract

In the evolving landscape of healthcare, the complexity and digitization of medical data necessitate robust Electronic Health Records (EHR) systems, capable of mitigating increasing cybersecurity threats without undermining patient care. This thesis introduces a CEMPS framework (Centralised EHR Model for Preserving Privacy and Security), developed in response to vulnerabilities in EHR systems. CEMPS aims to safeguard sensitive health information across healthcare spectrum, including medical care, pharmaceuticals, and health insurance. Adopting a holistic approach, the study explores privacy and security standards, aligning health information classification with regulations such as the Australian Privacy Acts, The Australian Privacy Principles (APPs), Health Insurance Portability and Accountability Act (HIPAA), and the EU General Data Protection Regulation (GDPR). The CEMPS integrates strict security policies and advanced privacy techniques to facilitate secure health data exchange among key stakeholders like doctors, nurses, and researchers, crucial for optimizing health outcomes and efficiency. The thesis further explores the CEMPS framework through a theoretical lens, focusing on its design principles and the mechanisms it employs to improve privacy and security within EHR systems. This theoretical examination underscores the framework’s capacity to ensure robust protection of sensitive health information, leveraging rational arguments to advocate for its efficacy. By emphasizing the strategic alignment of CEMPS with prevailing privacy standards and security protocols, this analysis illustrates how the framework can significantly elevate the management, privacy, security and confidentiality of EHR systems, offering a more controlled environment for health data. Ultimately, this thesis advocates for the industry-wide adoption of CEMPS, promoting a secure, efficient, and privacy-compliant healthcare environment. This research represents a significant step towards a healthcare landscape where EHR systems are both protectors of patient data and facilitators of improved healthcare delivery.

Search Google Scholar

Repository staff login