Healthc Inform Res.  2018 Jan;24(1):61-68. 10.4258/hir.2018.24.1.61.

Trends in Research on the Security of Medical Information in Korea: Focused on Information Privacy Security in Hospitals

• Kim YW
• Cho N
• Jang HJ

• KMID: 2403297
• DOI: http://doi.org/10.4258/hir.2018.24.1.61

Abstract

OBJECTIVES
Information technology involves a risk of privacy violation in providing easy access to confidential information,such as personal information and medical information through the Internet. In this study, we investigated medical information security to gain a better understanding of trends in research related to medical information security.
METHODS
We researched papers published on "˜ì˜ë£Œì •ë³´' and "˜medical information' in various Korean journals during a 10-year period from 2005 to 2015. We also analyzed these journal papers for each fiscal year; these papers were categorized into the areas of literature research and empirical research, and were further subdivided according to themes and subjects.
RESULTS
It was confirmed that 48 papers were submitted to 35 academic journals. There were 33 (68.8%) literature review articles, and analysis of secondary data was not carried out at all. In terms of empirical research, 8 (16.7%) surveys and 7 (14.6%) program developments were studied. As a result of analyzing these papers according to the research theme by research method, 17 (35.4%) papers on laws, systems, and policies were the most numerous. It was found that among the literature research papers on medical personnel were the most common, and among the empirical research papers, research on experts in information protection and medical personnel were the most common.
CONCLUSIONS
We suggest that further research should be done in terms of social perception, human resource development, and technology development to improve risk management in medical information systems.

Keyword

Electronic Health Records; Hospital Information Systems; Medical Informatics; Computer Security

MeSH Terms

Computer Security
Electronic Health Records
Empirical Research
Hospital Information Systems
Humans
Industrial Development
Information Systems
Internet
Jurisprudence
Korea*
Medical Informatics
Methods
Privacy*
Risk Management
Social Perception

Figure

• 

  Figure 1 QUOROM flowchart for literature review about risk management of medical information system in Korea.

• 

  Figure 2 Number of articles published by period.

• 

  Figure 3 Number of papers by research theme and research method.

Reference

1. Council of Europe. Explanatory report to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108) [Internet]. Strasbourg, France: Council of Europe;c2017. cited at 2018 Jan 10. Available from: https://rm.coe.int/16800ca434.

2. OECD. Guidelines on the protection of privacy and transborder flows of personal data [Internet]. Paris, France: OECD;c2018. cited at 2018 Jan 10. Available from: http://www.oecd.org/internet/ieconomy/oecdguidelinesontheprotectionofprivacyandtransborderflowsofpersonaldata.htm.

3. United Nations. Guidelines for the regulation of computerized personal data files [Internet]. New York (NY): United Nations;1990. cited at 2018 Jan 10. Available from: http://www.un.org/documents/ga/res/45/a45r095.htm.

4. Jeun YJ. The medical information protection and major Issues. J Korean Comput Inf Assoc. 2012; 17(10):257.

5. Kim YR. Exploring the social and legal issues of internet medical information: focusing on the credibility of internet medical information use and invasion of cyber privacy. J Commun Sci. 2010; 10(2):179–220.

6. Jeun YJ. The medical information and privacy protection. Korean Law Rev. 2006; 23:521–540.

7. Lee SM. The medical treatment informatization and medical treatment information protection. Hanyang Law J. 2006; 25(1):39–56.

8. Lee HY. The storage of electronic medical record and trusted third party. Hanyang Law Rev. 2013; 44:123–149.

9. Kim DS, Kim MS. Issues of health information protection and policy direction according to the progress of ehealth age. Informatiz Policy. 2006; 13(4):128–148.

10. Lee HJ. Problems and solutions of personal information protection in the medical area. Korean J Leg Med. 2012; 20(2):267–293.

11. Jung EY, Jung SJ. A study on perception and practice of protecting the patient medical information in some general hospital employees. Korean J Health Serv Manag. 2014; 8(4):35–45.

12. Hong CM, Shin W. Security requirements of order communication system in hospitals for compliance with Personal Information Protection Act. J Secur Eng. 2013; 10(5):513–526.

13. Jeong HJ, Kim NH. How do they manage personal information in hospital? A survey study for IT governance in hospitals. Crisisonomy. 2013; 9(8):47–66.