Privacy Forum proposal to the HISA board Final

Privacy and HISA: 

Privacy and HISA Peter Croll Presentation to the HISA National Board Melbourne, 17th Nov 2006

Are people overreacting to privacy issues?: 

Are people overreacting to privacy issues? To understand this – what do we mean by Privacy? Physical Privacy Communication Privacy Personal Privacy Information Privacy WHAT YOU STARING AT? Focus on Information Privacy specifically digital electronic information Security ≠ Privacy although they are different Privacy and Security go hand-in-hand

P, C & S: 

P, C andamp; S Privacy and Security issues are consistently identified as a key building block for HealthConnect among all stakeholders [DOHA 2004]. Privacy, confidentiality and security are paramount and the Australian Government will ensure that wherever the HealthConnect strategy is implemented [HealthConnect web] Technology is, on the whole, privacy neutral. It is the business drivers behind a technology and the incentive to exploit security flaws in its implementation that will determine the key privacy risks [NEHTA 2006].

Current Issues: 

Current Issues Health and Social Services Access SmartCard Human Services Minister Joe Hockey Prof Alan Fels – Consumer Taskforce Australian Privacy Law Reform - ‘Issues Paper 31’ of the 142 questions raised in the Issues Paper there are 33 directed to ‘Health Services and Research’. HIPAA in US Health Insurance Portability and Accountability Act National Heath Service, UK Spine system centralizing 50M medical summaries (to include highly sensitive personal information) accessible to 250,000 via smart card.

Slide5: 

Do You Know Where Your Medical Information Goes?

Digital Wallet for Health Access Card?: 

Digital Wallet for Health Access Card? ID card to offer digital wallet Ben Woodhead NOVEMBER 08, 2006 AUSTRALIANS will have the option of storing any personal information they want on the federal Government's proposed human services smartcard under plans detailed by Human Services Minister Joe Hockey today.Mr Hockey said that up to one-third of the storage space on the access card would be available to card holders, who could use it to store information such as medical requirements or shopping lists. 'We are creating a customer controlled area in the chip where individuals can store the information they want. In simple terms it makes the access card similar to a mini-iPod, where you can download minimum amounts of information onto the microchip and carry it around in your wallet or purse,' Mr Hockey said. 'We're using two-thirds of the capacity on the chip. The other one-third is in the hands of the individual.'

Slide7: 

Slide8: 

Slide9: 

Slide10: 

Slide11: 

Feedback on ehPASS’06: 

Feedback on ehPASS’06 Dear Peter Just a note to say how informative and valuable I found the symposium this week. I was pleased to hear you talking about a 2007 event - as somebody who has been responsible for two national conferences I know this is a difficult task. I'm not sure how you publicised the symposium this year but I was surprised that nobody from the Commonwealth government Department of Health and Ageing with responsibility for electronic-health (etc) attended. Perhaps you could target them especially next year, a speaker even? I noticed that two speakers spoke about research issues and human research ethics committees. At the NHMRC we have a keen interest in privacy and research - this may also be a spot for a speaker next year. Anyway, just wanted to say thank you and how much I enjoyed the sessions. I got a lot out of the two days. Cathy (Executive Director, National Health and Medical Research Council, Canberra)

HISA Privacy and Security Special Interest Group?: 

HISA Privacy and Security Special Interest Group? Opportunities: Establish HISA as national centre of Health Privacy expertise Ethics committees to see HISA as reference body (currently NHMRC via papers) Current pressure groups equates to individuals HISA to provide best practice forms e.g. consent, moral rights, compliance, etc. Act as a watchdog especially function creep Look after smaller business providers e.g. some General Practice Generate future revenue streams for HISA

Objectives: 

Objectives Provide through the professional HISA body a centre of expertise focusing on Privacy and Security in Health Informatics that will: keep a watching brief on technology, policies and legislation with regard to its effect on the Australian business and services community as well as the general public; provide a service for HISA members relating to best working practice*; develop a forum for discussing contemporary issues; act as an advocate on government policy to represent the interests of its members; provide a focal point for consortium member organisations and other interested formal entities (e.g. HREC); maintain a knowledge base of international developments; provide position papers to both inform and respond to initiatives; and, wherever possible, ensure the commitment and expertise of participants is duly recognized. *Note: this group will not provide any legal advice on matters relating to privacy and security – appropriate disclaimers will need to be developed.

Collaborations: 

Collaborations Coalition for Health Informatics members WG4 (IMIA working group on security) ACHI CSIRO and Universities

Key Privacy People: 

Key Privacy People Ms Robin Banks, Public Interest Advocacy Centre Mr Paul Chadwick, Consultant (formerly Victorian Privacy Commissioner) Ms Karen Curtis, Privacy Commissioner (Cth) Mr Peter Ford, Privacy, Security and Telecommunications Consultant Mr Duncan Giles, Freehills Solicitors Professor Margaret Jackson, School of Accounting andamp; Law, RMIT University Ms Helen Lewin, Telstra Corporation Associate Professor Roger Magnusson, Faculty of Law, University of Sydney Dr Moira Paterson, Faculty of Law, Monash University Ms Joan Sheedy, Australian Attorney-General’s Department Mr Peter Shoyer, Information Commissioner (NT) Professor Colin Thomson, National Health and Medical Research Council Mr Nigel Waters, Pacific Privacy Consulting Ms Beth Wilson, Health Services Commissioner (Vic) Ms Sue Vardon, Department for Families andamp; Communities (SA) Ms Amanda Adrian, Australian Nursing Federation Ms Melanie Cantwell, Consumers’ Health Forum of Australia Inc HEALTH Dr Bridget Bainbridge, National E-Health Transition Authority Professor David Hill, The Cancer Council (Vic) Ms Anna Johnston, Australian Privacy Foundation Dr Graeme Miller, Family Medicine Research Centre Ms Julia Nesbitt, Australian Medical Association Professor Margaret Otlowski, Faculty of Law, University of Tasmania Ms Dianne Scott, Department of Human Services (Vic) Dr Heather Wellington, Peter MacCallum Cancer Centre

Approach: 

Approach Establish core privacy group Recruit: Prof. Bill Caelli AO (QUT), A/Prof Christine O’Keefe (CSIRO, p-health), Dr Chris Connelly (Galaxia), Peter van Dijk (Galaxia), Dr Susan Smith (QH), Cathy Clutton (NHMRC), Dr Bridget Bainbridge (NEHTA) Build Survey Email forum: Create conversation with members ALRC submission (15th Jan07) Meeting with Prof Les McCimmon (commissioner ALRC) Initiate HISA Privacy SIG (Schedule/Plan/Strategy) Develop HISA privacy related services