| 
                           
                              | 
                                       Paul J. Brusil, Ph.D
                                          | Chapter 49 – | Medical Records Security |  
 
 Chapter Contents:
 
 
 
                                       
                                          |  | 49.1 |  | INTRODUCTION |  
                                          |  | 49.1.1 |  | Information Is Key to Healthcare |  
                                          |  | 49.1.2 |  | Why Security and Privacy Are Important to Healthcare Information |  
                                          |  | 49.1.3 |  | Impacts of Information Technology |  
                                          |  | 49.1.4 |  | Information and IT Security Challenges |  
                                          |  | 49.1.5 |  | Core Security Model in the Healthcare Context |  
                                          |  | 49.2 |  | EXTERNAL DRIVERS |  
                                          |  | 49.2.1 |  | Political Pressure |  
                                          |  | 49.2.2 |  | Media Pressure |  
                                          |  | 49.2.3 |  | Public Pressure |  
                                          |  | 49.2.4 |  | Patient Expectations |  
                                          |  | 49.2.4.1 |  | Expectation in the United States |  
                                          |  | 49.2.4.2 |  | Expectations in the United Kingdom |  
                                          |  | 49.2.5 |  | Legal Pressure |  
                                          |  | 49.2.5.1 |  | Protection Legislation |  
                                          |  | 49.2.5.2 |  | Laws and Regulations in the United States |  
                                          |  | 49.2.5.3 |  | Laws and Regulations in the United Kingdom |  
                                          |  | 49.2.5.4 |  | Laws and Regulations in Other Countries |  
                                          |  | 49.2.6 |  | Government Policies |  
                                          |  | 49.2.6.1 |  | Government Policies in the United Kingdom |  
                                          |  | 49.2.6.2 |  | Government Policies in the United States |  
                                          |  | 49.2.7 |  | Consortia and Standards Organizations |  
                                          |  | 49.2.7.1 |  | Forum on Privacy and Security in Healthcare |  
                                          |  | 49.2.7.2 |  | Other Consortia |  
                                          |  | 49.2.7.3 |  | Nonmandatory (External) Imperatives-BS7799/ISO 17799 |  
                                          |  | 49.3 |  | INTERNAL DRIVERS |  
                                          |  | 49.4 |  | DIFFICULTIES IN IMPLEMENTING COUNTERMEASURES |  
                                          |  | 49.6 |  | NOTES |  
                                          |  | 49.7 |  | UNITED KINGDOM RESOURCES |  
                                          |  | 49.8 |  | UNITED STATES RESOURCES |  
 |  | 
                  
                     |  |