

You have already added 0 works in your ORCID record related to the merged Research product.
You have already added 0 works in your ORCID record related to the merged Research product.
<script type="text/javascript">
<!--
document.write('<div id="oa_widget"></div>');
document.write('<script type="text/javascript" src="https://www.openaire.eu/index.php?option=com_openaire&view=widget&format=raw&projectId=undefined&type=result"></script>');
-->
</script>
You have already added 0 works in your ORCID record related to the merged Research product.
You have already added 0 works in your ORCID record related to the merged Research product.
HL7 Standards and components
HL7 Standards and components
Aiming to strengthen EU citizens’ fundamental privacy rights in the digital age the new European General Data Protection Regulation shall apply from May 25th 2018. It will require companies processing personal data to implement a set of organizational and technical controls for ensuring proper handling of these data. Obviously this applies for companies providing eHealth services. As HL7 off ers a lot of material to support security and privacy for handling personal healthcare data, this paper aims at showing which HL7 standards and components can be used to support the implementation of GDPR related controls.
- Deggendorf Institute of Technology Germany
- University of Applied Sciences Technikum Wien Austria
- University of Regensburg Germany
CDA, FHIR, HL7, Privacy, Security
CDA, FHIR, HL7, Privacy, Security
34 references, page 1 of 4
European Parliament and Council: Regulation (EU) 2016/679 - Summary Page. Online: http://eur-lex.europa.eu/legal-content/ EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC
European Parliament and Council: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. Online: http://eur-lex.europa.eu/legal-content/EN/TXT/ PDF/?uri=CELEX:32016R0679&from=EN
European Parliament and Council: Directive 95/46/EC. 1995, Online: http://eur-lex.europa.eu/legal-content/en/ ALL/?uri=CELEX:31995L0046
European Commission: Reform of EU data protection rules. Online: http://ec.europa.eu/justice/data-protection/reform/index_en.htm European Parliament and Council: Directive (EU) 2016/1148. Online: http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.194.01.0001.01.ENG&toc=OJ:L:2016:194:TOC Wikipedia, General Data Protection Regulation. en.wikipedia.org/wiki/General_Data_Protection_Regulation Health Level 7 International, Inc., Ann Arbor, USA. www.hl7.org Bobel B, Lopez DM, Gonzalez C. Patient privacy and security concerns on big data for personalized medicine. Health and Technol. 2016; 6: 75-81.
[10] European Commission - Articel 29 Data Protection Working Party: Guidelines on the right to data portability. Online: ec.europa.eu/ newsroom/document.cfm?doc_id=44099
[11] Blobel B, Ruotsalainen P, González C, López D. Policy-driven management of personal health information for enhancing interoperability. Stud Health Technol Inform. 2014; 205:463-467. [OpenAIRE]
[12] International Organization for Standardization. ISO 13606-1 EHR communication - Reference model. Geneva: ISO; 2017.
[13] HL7 International Inc. HL7 V3 DAM: Composite Security and Privacy Domain Analysis Model - Release 1. Ann Arbor: HL7 International; 2014.
[14] International Organization for Standardization. ISO 22600 Health informatics - Privilege management and access control. Geneva: ISO; 2014.
[15] HL7 International Inc. HL7 Healthcare Privacy and Security Classifi cation System (HCS), Release 1. Ann Arbor: HL7 International, Online: http://www.hl7.org/documentcenter/private/ standards/v3/PRIV_SEC_CLASS_SYS_R1_2014AUG.zip
citations This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).0 popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.Average influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).Average impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.Average visibility views 721 download downloads 81 citations This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).0 popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.Average influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).Average impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.Average Powered byBIP!
- 721views81downloads



- Deggendorf Institute of Technology Germany
- University of Applied Sciences Technikum Wien Austria
- University of Regensburg Germany
Aiming to strengthen EU citizens’ fundamental privacy rights in the digital age the new European General Data Protection Regulation shall apply from May 25th 2018. It will require companies processing personal data to implement a set of organizational and technical controls for ensuring proper handling of these data. Obviously this applies for companies providing eHealth services. As HL7 off ers a lot of material to support security and privacy for handling personal healthcare data, this paper aims at showing which HL7 standards and components can be used to support the implementation of GDPR related controls.