In EMIS Web, confidentiality policies function as crucial mechanisms to ensure the privacy of patient data by restricting access based on defined user roles. These policies allow access to patient records and data items only for users who are part of a specific work group or hold the necessary RBAC (Role-Based Access Control) activity privileges.
Managing Confidentiality Policies with RBAC
RBAC activities are integral to managing confidentiality policies effectively. They determine which users can apply, remove, or override these policies. To apply a confidentiality policy, users must have the RBAC activity B0080 'Establish Sealing Controls,' while overriding a policy requires the RBAC activity B0070 'Access Patient Sealed Data.'
Users not included in the relevant work group can see that a confidentiality policy exists, but cannot view the sensitive data it protects. This ensures high-level data privacy.
When confidentiality is overridden, notifications are triggered for the original policy applier and organisation administrators, enhancing accountability. These overrides are also audited for further security.
Applying and Removing Policies
Confidentiality policies can be applied to various elements within EMIS Web:
- Patient's entire records, ensuring sensitive information is not inadvertently shared.
- Individual items or events, such as specific medical conditions, where access is limited.
To apply or change these settings, navigate through the Confidentiality Policy Manager. Removal and management of these policies are similarly handled, ensuring that only authorised personnel can access pertinent information.
Implementing these confidentiality policies not only protects patient data but allows for streamlined operations within healthcare settings.
Did you know?
Hero Health can enhance patient management through various functionalities such as individual messaging and care navigation. These integrations can ensure that patient interactions remain efficient and secure, aligning with EMIS Web confidentiality standards.
For more information, visit Hero Health's features page.
