SECURITY AND ELECTRONIC HEALTH RECORDS IN A RESOURCE LIMITED SETTING: THE CASE OF SMART-CARE ELECTRONIC HEALTH RECORD IN ZAMBIA

No ratings

Presented at SRISecCon 2014 by

Keith Mweebo

This paper presents a case study of security issues related to the operationalization of smart-care, an electronic medical record (EMR) used to manage Human immunodeficiency virus (HIV) health information in Zambia. The main aim of the smart-care program is to link up services and improve access to health information by providing a better and reliable way to collect, store, retrieve and analyse health data in a secure way. As health professionals improve access to patient health information electronically, there is need to ensure this information is secured and patient privacy and confidentiality is maintained. During the initial stages of the program, there were security and confidentiality concerns arising from lost cards and unlimited access by clinical staff. The introduction of pin numbers for patient cards and clinical staff access cards with passwords helped address some of the concerns. Nonetheless, public health information technologists still advocate for more reliable security measures that cover device, network, transmission and application. Since its inception in 2004, Smart-care has expanded to integrate more than 500 health facilities by the end of 2009. In rural and remote locations without internet, smart cards and mobile devices such as lap tops are used to transfer data for onward merging with the national data base.