I. Introduction:
A brief chronological review of “privacy” concept indicated that it is accentuated since Hippocrate, s oath at the first time (1، 2). Thereafter, It was argued as “the right to be let alone” by Samuel Warren and Louis Brandies in 1890s, then it evolved as “informational privacy,” which is defined by Allen Westine suggesting it is considered as an individual’s right to control personal information(3).
Privacy, confidentiality and security are three interwoven concepts concerning personal information. Privacy refers to determination of the authorized collection and storage of personal information, meanwhile, confidentiality indicate how organizational information may be collected or re-used and also explicate required conditions …show more content…
On the other hand, medical profession is on the basis of mutual trust between patient and health care provider and privacy has main role in this regard(1). Health information privacy is very important as health records in any form (paper-based or electronic) contain critical information (e.g. demographic data, occupation related data, social, financial and personal information) determining individual identification(7).
Moreover, the disclosure of personal health information may impose economic losses on patients and their psychological as well as sociological status may be at stake. Consequently, individuals often showed concerns for information privacy violations(8، 9). Inattention towards patients’ privacy breaches has serious consequences such as partially concealment of medical history; patient reluctance to go to physician; increased anxiety and aggressive behaviors(10).
Security breaches of personal health information is influential on patients and health care organizations as theft such information imposes over 7 billion $ on health care industry annually. Further, victims may be high sensitive regarding confidential records and apprehensive that their financial or medical identity get …show more content…
provisions in addition to Health Insurance portability and accountability Act in 2011. It highlighted major terms definitions, specification of authorized entities, goals setting about medical, financial and administrative issues for having access to Access to PHI, defining of minimum necessary requirements, determining standardized access to PHI in emergency medical conditions, developing disciplinary measures for compliance or noncompliance with access rights, setting out opt out rights, restrictions for access to PHI relating by health plan, Tracking activities for PHI disclosure, describing issues on creation de-identified data and related standards, defining requirements on the disclosure of data for research purposes, disclosing information for legally permitted or required requests or public health and government