[LINK] The "health" record security model

[Karl Auer]

On Sun, 2018-11-11 at 16:33 +1100, Bernard Robertson-Dunn wrote:
> IMHO, it is more likely that the ALP will kill the thing.

Well - OK. But probably not unless they are in Government?

> so [ADHA] could meet their self imposed deadline of 1 July 2012.

My squint-at-my-thumb estimate would be five to ten years to full
implementation, mostly because it would take that time for vendors to
upgrade their systems to be compatible with the interoperability
standards.

> Data exchange, or interoperability, is the way to go - everybody
> agrees, but it's not an easy problem.

I think the design of the standard - interoperability - is one of the
difficult problems.

The other is how to communicate user permission to data holders. How
does a citizen securely tell their doctor or whomever that they can
share that but not this? This is *especially* difficult if the
information is not document based. So it's a two-part difficulty; how
do we securely communicate permissions how do we identify what the
permissions apply to?

Regardless of all that, the first thing that must be discarded in any
design is the "emergency room scenario". The system should be useful
for some large percentage of normal medical interactions; it does not
need to be useful for every edge case.

The second thing that must be discarded is the desire for the system to
do everything. Pick one thing that will really make a difference, make
sure the interoperability standards are flexible and extensible, then
make that one thing happen well. It will cost a fraction of trying to
develop everything at once, will be doable in fraction of the time, and
will have an immediate positive effect. The lessons learned during
implementation will allow new things to be handled faster and better.

But mostly I want a statement of aims first.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://twitter.com/kauer389

GPG fingerprint: A0CD 28F0 10BE FC21 C57C 67C1 19A6 83A4 9B0B 1D75
Old fingerprint: A52E F6B9 708B 51C4 85E6 1634 0571 ADF9 3C1C 6A3A