+3. Requirements for security and logging.
---+3.1. An EHR system designed to be used by health professionals shall provide reliable mechanisms …
---+3.2. The European logging software component of an EHR system designed to enable access by …
---+3.3. The harmonised software components of an EHR system shall include tools or mechanisms to …
---+3.4. The harmonised software components of an EHR system that store personal electronic health data …

3. Requirements for security and logging.

3.   Requirements for security and logging.

1. Panoramica

,
3.1. An EHR system designed to be used by health professionals shall provide reliable mechanisms …

3.1.

 An EHR system designed to be used by health professionals shall provide reliable mechanisms for the identification and authentication of health professionals.
3.2. The European logging software component of an EHR system designed to enable access by …

3.2.

 The European logging software component of an EHR system designed to enable access by healthcare providers or other individuals to personal electronic health data shall provide sufficient logging mechanisms that record at least the following information on every access event or group of events:

(a)

identification of the healthcare provider or other individuals having accessed the personal electronic health data;

(b)

identification of the specific natural person or persons having accessed the personal electronic health data;

(c)

the categories of data accessed;

(d)

the time and date of access;

(e)

the origin or origins of data.
3.3. The harmonised software components of an EHR system shall include tools or mechanisms to …

3.3.

 The harmonised software components of an EHR system shall include tools or mechanisms to review and analyse the log data, or it shall support the connection and use of external software for the same purposes.
3.4. The harmonised software components of an EHR system that store personal electronic health data …

3.4.

 The harmonised software components of an EHR system that store personal electronic health data shall support different retention periods and access rights that take into account the origins and categories of electronic health data.

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Standard correlati

2. Requisiti identificati

Requisiti

3. Standard correlati

Standard