Health informatics Guidance on health information privacy education in healthcare organizations

Available format(s)

Hardcopy , PDF , PDF 3 Users , PDF 5 Users , PDF 9 Users

Language(s)

English

Published date

06-01-2017

Publisher

International Organization for Standardization

ISO/TR 18638:2017 specifies the essential educational components recommended to establish and deliver a privacy education program to support information privacy protection in healthcare organizations. The primary users of this document are those responsible for planning, establishing and delivering healthcare information privacy education to a healthcare organization.

ISO/TR 18638:2017 provides the components of privacy education within the context of roles and job responsibilities. It is the responsibility of the organization to define and apply privacy protection policies and procedures and, in turn, ensure that all staff in the healthcare organization understands their privacy protection responsibilities.

The scope of ISO/TR 18638:2017 covers:

a) the concept of information privacy in healthcare;

b) the challenges of protecting information practices in the healthcare organization;

c) the components of a healthcare information privacy education program;

d) basic health information privacy educational content.

DocumentType	Technical Report
Pages	32
PublisherName	International Organization for Standardization
Status	Current

Standards	Relationship
PD ISO/TR 18638:2017	Identical

ISO/IEC 27001:2013	Information technology — Security techniques — Information security management systems — Requirements
ISO/IEC 27003:2017	Information technology — Security techniques — Information security management systems — Guidance
ISO/IEC 27004:2016	Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation
ISO/IEC 27006:2015	Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems
ISO/IEC 27002:2013	Information technology Security techniques Code of practice for information security controls
ISO/IEC 27005:2011	Information technology Security techniques Information security risk management