BEZBEDNOST I ZAŠTITA PODATAKA O LIČNOSTI U ZDRAVSTVENIM USTANOVAMA
SECURITY AND PERSONAL DATA PROTECTION IN HEALTHCARE INSTITUTIONS

Summary/Abstract: Reason for writing and research problem (s): By entering the General Data Protection Regulation (GDPR) into force, as well as the relevant national regulations transposing provisions of this Regulation into the legislation of non-EU countries, the healthcare institutions in the region got the complex task to harmonize their procedures with these provisions. Aims of the paper: The aim of the paper is to provide a review of the applicable safety standards, as well as the relevant safety guidelines in healthcare, the application of which allows for greater safety of employees, patients and other people visiting health facilities. Also, the paper will show the regulatory requirements related to special categories of personal data – data concerning health. Methodology: The paper presents a review of the normative aspects of safety in health care, as well as the protection of personal data, the factual situation in this field, and the challenges brought by the new regulations in this field. Research/Paper Limitation: Data concerning health, as special category of personal data, imply special protection measures and special technical, physical and organizational controls, so that only one of the possible approaches in the implementation of these measures is presented in the paper. Results / General Conclusion: The importance of adequate legal provisions understanding and implementation is emphasized, as well as the application of proportional controls for ensuring the safety of the person and personal data. Conclusion: Efforts should be made to implement measures that will guarantee the protection of personal data in healthcare institutions, bearing in mind the history of frequent and serious breaches of healthcare data. Research / Paper Validity: The justification of work is in the fact that it is necessary to guarantee patients, citizens and employees in healthcare institutions an adequate level of protection of personal data, as well as personal safety during the processes they perform.

• Details
• Contents