Compendium of Health Telematics Projects 94-98 (Draft)


	Updated: Aug 26, 1998
This is the most recent structured* information on this project. Complementary data can be found on previous documents*
ISHTAR Implementing Secure Healthcare Telematics Applications in Europe

Project code:	HC 1028
Project value:	1.57 KECU
EC contribution:	600.0 KECU
Number of partners:	27
Number of countries:	12
Duration:	36 months
Starting date:	Feb 1, 96

Contact:	Barry Barber NHS Executive Info. Manag. Center 15, Frederick Road B15 1JD Birmingham United Kingdom
Tel:	44 16 84 56 62 20
Fax:	44 16 84 56 67 70
E-mail:	100606.2753@compuserve.com
Web Site:	www.ishtar.org.uk

Overview

The problem of ensuring that healthcare information security requirements are addressed appropriately throughout the European Union is considerable and will take a substantial amount of time to take effect.

Healthcare security requirements are organisational, managerial, professional, legal and technical issues. The danger is that they are side-lined into the technical arena instead of being taken seriously at the level of education and awareness of Healthcare Professional at the highest managerial level of Healthcare Establishments.

The ISHTAR Project takes a major step in the awareness process and seeks to ensure that HCEs and Fourth Framework Health Telematics Projects are kept in touch with the legal and safety issues arising from:

the widespread utilisation of Health Telematics in the context of direct patient care;
the legal implications of the EC Directive (95/46/EC) on the protection of individuals with regard to the processing of personal data and on the free movement of such data; and
the implications of the Council of Europe Recommendation (R97/5) on the protection of medical data.

Purpose and objectives

The aim of the ISHTAR Project is to provide advice and guidance in all forms of dissemination. This will be acheived by:

Creating a group of experts on legal, medical and technical aspects of data protection in healthcare. This group will act as an advisory panel and “consultants” to both the Commission and to other Fourth Framework Health Telematics Projects facing security needs. The group will also interface with all the relevant national, European and International security forums.
Providing the means for implementing, validating and maintaining existing guidleines on health data protection and providing a healthcare incident reporting scheme.
Enhancing existing security guidelines for healthcare by addressing the technical aspects of health data protection within the context of telematics applications and demonstrating their usefulness and practicality.
Increasing the awareness of both the public and healthcare personnel on issues related to health data protection by way of awareness seminars and world wide dissemination of its results.
Identifying and analysing the legal and societal issues raised by telemedicine and networking in healthcare.

The major work of implementing, validating and enhancing the existing security guidelines is supported by a network of ten Verification Centres who are a representative sample of European HCEs/ Their work will ensure that the results of ISHTAR will be practical and useful for the whole European healthcare environment.

Results

By the time ISHTAR concludes in 1999, it is planned that the following results will be available:

Electronic healthcare information security guidelines library
Various up-to-date papers covering all aspects of healthcare information security including:
- The Implications of the EU Directive and Council of Europe Recommendation for Healthcare Establishments
- Current Security Issues Faced by Healthcare Establishments
- Requirements for a Secure Healthcare System Architecture
Security advice, recommendations and evaluation to some Fourth Framework Health Telematics Projects
A suite of European information security training and awareness courses targeting all healthcare personnel
A prototype security incident reporting scheme to enable evidence to be reported of the level of security breaches within European Healthcare Establishments
Widespread validation of existing healthcare security guidelines to enhance the usability and practicality of that guidance
A full legal liability analysis into the issues raised by telemedicine and networking concluding with recommendations and a liability requirements structure
Provision of a world-wide interactive dissemination service.

List of deliverables

ID	Title	Delivery Date	Restricted or Public
1	Quality Plan	01	R
2	Security Workshop	01	P
3	Consultancy Structure and Activities Plan	04	R
4	Detailed Course Descriptions and Structure	04	P
5	Verification Centres Structure and Activities Plan	04	P
6	Health Care User Needs for Incident Reporting	05	P
7	Introductory Publicity Brochure	05	P
8	Aggregate Project Specific Security Recommendations Reports	08	P
9	Current Security Issues Faced By Health Care Establishments	08	P
10	Implications of EU Directive and Council of Europe Recommendations for Health Care Establishments	08	P
11	Individual Course Material	09	R
12	Consultancy Further Activities Plan	11	R
13	First Running of Security Courses	11	P
14	First Annual Review Report	11	R
15	Health Care Incident Reporting Scheme	13	P
16	Liability Issues Raised by Telemedicine and Health Care Networking	13	P
17	First Annual Report	13	P
18	Verification Centres Annual Activity Report	13	P
19	Security Courses Evaluation Report	13	P
20	Demonstration of WWW Service	16	R
21	Demonstration of WWW Service	19	P
22	Liability Requirements Structure and Recommendations for Telemedicine and Health Care Networking	20	P
23	Requirements for Secure Healthcare System Architecture	21	P
24	Health Care Incident Reporting Scheme Implementation Report	23	P
25	Second Annual Review Report	23	R
26	Verification Centres Annual Activity Report	25	P
27	Second Annual Report	25	P
28	Aggregate Project Specific Security Evaluation Reports	32	P
29	Full Project Results Brochure	32	P
30	Health Care Incident Reporting Scheme Validation Report	35	P
31	Evaluation Report of WWW Service	36	P
32	Verification Centre Annual Activities Report	36	P
33	European Data Security Guidelines Handbook - Version 2	36	P
34	Third Annual Review Report	36	R
35	Final Project Report	36	P
36	Technology Implementation Plan	36	P

List of participants

Name:	Dr Barry Barber
Organisation:	NHS Executive's Information Management Centre
Address:	c/o 15 Frederick Road Birmingham B]5 IJD
Country:	United Kingdom
E-mail:	kbw57@dial.pipex.com

Name:	Alison Treacher
Address:	PO Box 231 Burton upon Trent DE13 8ZX
Country:	United Kingdom
E-mail:	100606.2753@compuserve.com

Name:	Dr Kees Louwerse ; Erik Flikkenschild
Organisation:	Academisch Ziekenhuis Leiden CDIV
Address:	Building 1, H5P PO Box 9600 2300 RC Leiden
Country:	The Netherlands
E-mail:	cplouwer@cdiv.azl.nl ; elaflikke@cdiv.azl.nl

Name:	Paulene McKeever
Organisation:	AIC Limited
Address:	26 Temple lane Temple Bar Dublin 2
Country:	Ireland
E-mail:	73173.1245@compuserve.com

Name:	Dr Francois André Allaert
Organisation:	CEN BIOTECH
Address:	Dept. de Biostatistiques et Information Medicale C.H.R.U. du Bocage 21 000 Dijon
Country:	France
E-mail:	cenbiotech@ipac.fr

Name:	Dr Libor Steiskal
Organisation:	Centre for Health Systems, Information and Communication
Address:	Institute for Clinical and Experimental Medicine Pavilion B5 Videnska 800 140 00 Prague
Country:	Czech Republic
E-mail:	libor.stejskal@medicon.cz

Name:	Prof. Francis Roger-France
Organisation:	Cliniques Universitciires St Luc
Address:	10 Avenue Hippocrate Box 4717 1200 Brussels
Country:	Belgium
E-mail:	roger@infm.ucl.ac.be

Name:	John Davey
Organisation:	HEIMDALL Limited
Address:	Claremont House 22/24 Claremont Road Surbiton KT6 4QU
Country:	United Kingdom
E-mail:	101530.675@compuserve.com

Name:	Dr Fenno Ottes
Organisation:	HISCOM
Address:	Schipholweg 97 2300 AX Leiden
Country:	The Netherlands
E-mail:	fottes@hiscom.nl

Name:	Dr Cesar Telmo Costa
Organisation:	Hospital de Egas Moniz
Address:	Serviço lnformatica Rua do Junquiera 1 26 Lisboa 1300
Country:	Portugal
E-mail:	ctelmo@mail.telepac.pt

Name:	Dr Dimitris Maroulis
Organisation:	Kyros
Address:	55 Evripidou St. and Thisseos Ave. Kailithea 17674 Athens
Country:	Greece
E-mail:	dmarou@compulink.gr

Name:	Dr Steven Furnell
Organisation:	PEP Research and Consultancy Limited
Address:	Network Research Group Charles Cross Centre Constantine Street Plymouth PL4 8DE
Country:	United Kingdom
E-mail:	stevef@dan.see.plym.ac.uk

Name:	Dr Birgit Baum-Waidner
Organisation:	r3 Security Engineering AG
Address:	Zurichstrasse 151 8607 Aathal
Country:	Switzerland
E-mail:	baum@r3.ch

Name:	Raiia Tervo-Pellikka
Organisation:	RaTe Oy
Address:	Fasaanipolku ]3A 02700 Grankulla
Country:	Finland
E-mail:	raija.tervopellikka@pp.kolumbus.fi

Name:	John Fowler
Organisation:	The Royal Hospitals NHS Trust
Address:	The John Ellicott Centre Cavell Street London El 2BW
Country:	United Kingdom

Name:	Dr Corrado Paganelli
Organisation:	Universitá di Brescia
Address:	Clinica Odontoiatrica Spedali Civili 1 251 00 Brescia
Country:	Italy
E-mail:	paganell@master.cci.unibs.it

Name:	Gerrit Bleumer
Organisation:	University of Hildesheim
Address:	Institut fuer Informatik Samelsonsplatz 1 31141 Hildesheim
Country:	Germany
E-mail:	bleumer@acm.org

Name:	Dr Bernd Blobel
Organisation:	University of Magdeburg
Address:	Institut fuer Biometrie und Medizinische Informatik Leipziger Strasse 44 39120 Magdeburg
Country:	Germany
E-mail:	bernd.blobel@mrz.uni-magdeburg.de

Name:	Prof. Robert Clark
Organisation:	University College Dublin
Address:	Faculty of Law Belfield Dublin 4
Country:	Ireland

Name:	Prof. Sokratis Katsikas ; Prof. Dimitris Gritzalis
Organisation:	University of the Aegean
Address:	Research Unit 30 Voulgaroktonou Street 114 72 Athens
Country:	Greece
E-mail:	ska@aegean.gr ; dgrit@aegean.gr

Name:	Prof. George Pangalos
Organisation:	University of Thessoloniki
Address:	Informafics Laboratory Computers Division Faculty of Technology Thessaloniki 54006
Country:	Greece
E-mail:	gip@eng.auth.gr

Name:	Caroline Laske
Organisation:	Vrije Universiteit Brussel
Address:	c/o Wezembeekstraat 4A 3080 Tervuren
Country:	Belgium
E-mail:	brondel-laske.be@skynet.be



	Copyright 1998 © EHTO All rights reserved This server is the only official EHTO WWW knowledge repository. Mail suggestions to: webmaster@ehto.org

ISHTAR

Implementing Secure Healthcare Telematics Applications in Europe

Overview

Purpose and objectives

Results

List of deliverables

List of participants