“Medical information is now transferred by patients”... Full-fledged implementation of transmission request rights
Daeryun Law Firm: “Security and reliability must be thoroughly secured” An era has begun where patients can directly manage and utilize their medical records and health information. This is because the ‘right to request transmission of personal information’ system was implemented in earnest following the enforcement of the revised ‘Personal Information Protection Act’ in March. Legal experts advised that a technical and management system must be established as a major change has begun in the data flow between medical institutions and patients. On the 7th, Daeryun Law Firm introduced the systems that companies and institutions must have through a corporate and implications report on the revised personal information processing policy guidelines. The 'right to request transmission of personal information' is the right of the information subject to request that his or her personal information be transmitted to him or her or a third party, and the 'right to data portability' stipulated in the European Union's (EU) General Data Protection Regulation (GDPR) is adapted to domestic circumstances. This system was introduced. This system is a key axis of the 'My Data' policy that ensures that individuals can independently integrate and utilize their information on various platforms, and is being applied sequentially in sensitive information fields such as medical care, communications, and finance. Among them, the medical field is one of the core application areas of this system, and it is believed that it could have a significant impact on the future medical treatment and health management system. With the implementation of this system, patients will be able to use the Korea Disease Control and Prevention Agency, National Health Insurance Service, Health Insurance Review and Assessment Service, and tertiary general hospitals. Vaccination records, health checkup results, medical treatment details, medication history, diagnosis information, etc., which were distributed across public and private institutions, can be received directly or transmitted to the desired institution or platform. This makes it possible to transfer medical records between hospitals as well as integrated health management through the personal health record (PHR) platform. The Personal Information Protection Committee is expanding the scope of My Data application to the medical field, communications, energy, etc., and plans to establish a more solid institutional foundation for medical information transmission by 2026. Transmission of personal information must be done through a specialized intermediary agency, and is only permitted through encryption and API methods. Scraping methods are prohibited, and medical data is stored and utilized through specialized 'specialized organizations'. However, information that can be transmitted is limited to information provided by the information subject or created through activities, and data (risk prediction, profiling results, etc.) analyzed and processed by the hospital itself is, in principle, not included in the transmission target. Exceptionally, diagnostic information can be transmitted under the Medical Service Act. Officials predict that the institutionalization of the right to request personal information transmission in medical settings will not only establish patient-centered health information sovereignty, but will also become the basis for precision medicine and customized health management services in the future. Daeryun Law Firm said, "A patient-centered medical data utilization system has begun," and added, "Medical institutions such as general hospitals must thoroughly ensure the security and reliability of the data transmission process, considering the nature of handling sensitive personal information." He continued, "PHR. He added, “Platforms and digital healthcare companies, as recipients of transmitted data, must also meet the My Data registration requirements and have a technical and management system that guarantees the rights of information subjects.” Meanwhile, as the My Data project is recently on track, the government is also preparing specific guidelines for the transmission of My Data personal information. On the 6th, the Personal Information Protection Committee published the 'Guide to the MyData Personal Information Transmission Request System in All Fields', a draft of which was released in March last year and collected opinions.[View full article]
“Medical information is now carried by patients”... Full-fledged implementation of transmission request rights (click here)