within that patient’s record in their own clinical system or portal. Boards will register all users and have processes in place to control role based access, ensure that clinicians access ECS/KIS appropriately and audit users. A National Access by Access by Access is via Access via Access via Access Access process Authentication healthcare healthcare the Spine portal secure HSC local clinical requires user Service for providers is providers is using a NHS network portal. portals in NHS name and Health (NASH) through the through the smartcard and Patient consent regions. password Public Key ELGA portal. Sundhed.dk passcode required every Can usually be Infrastructure Validation and portal. time the records accessed via (PKI) Certificate proof of treatment Patients’ consent are accessed interface with is a digital relationship is to treatment also Regular audits user’s main certificate that required (e.g. by implies consent for are made of system so that authenticates scanning the healthcare who has multiple an individual patient’s citizen providers to access accessed the passwords not provider or card/e-card). data necessary for record (no required. organisation Default duration treatment. technical data whenever they of access = 28 There are different about how this access the My days proof of rules for is conducted). Health Record treatment (e.g. identification and system inserting of ecard authentication Healthcare and healthcare which are providers have provider card in dependent on two methods to the office); regional EHR access My pharmacies can systems (controlled Health Record: only access via local data via conformant ELGA for 2 controller in clinical software hours. accordance
within that patient’s record in their own clinical system or portal. Boards will register all users and have processes in place to control role based access, ensure that clinicians access ECS/KIS appropriately and audit users. Access process A National Authentication Service for Health (NASH) Public Key Infrastructure (PKI) Certificate is a digital certificate that authenticates an individual provider or organisation whenever they access the My Health Record system Healthcare providers have two methods to access My Health Record: via conformant clinical software Access by healthcare providers is through the ELGA portal. Validation and proof of treatment relationship is required (e.g. by scanning the patient’s citizen card/e-card). Default duration of access = 28 days proof of treatment (e.g. inserting of ecard and healthcare provider card in the office); pharmacies can only access ELGA for 2 hours. Access by healthcare providers is through the Sundhed.dk portal. Patients’ consent to treatment also implies consent for healthcare providers to access data necessary for treatment. There are different rules for identification and authentication which are dependent on regional EHR systems (controlled via local data controller in accordance Access is via the Spine portal using a NHS smartcard and passcode Access via secure HSC network portal. Patient consent required every time the records are accessed Regular audits are made of who has accessed the record (no technical data about how this is conducted). Access via local clinical portals in NHS regions. Can usually be accessed via interface with user’s main system so that multiple passwords not required. Access requires user name and password
My-Health-Record-in-Emergency-Departments-Literature-Review-and-Environm....docx