FAIS-007: sensitive data

[lukeaduncan]

Contact Details

[email protected]

Section Number

use cases

What is wrong

The use case examples define which elements are sent. No distinction is made as to whether the data is sensitive or not. If personal data and health data are sent at the same time, there is a risk that, in the event of an error, the wrong receiver will be able to view sensitive personal data, including medical conditions.

Describe the solution you'd like

I believe that personal information must be transmitted separately from health or case data. The process should specify this.

Relevant log output

No response

Priority

{"High"=>"Important issue where there is major issue to be resolved. Requires discussion and debate."}

Code of Conduct

• I agree to follow the IHE Code of Conduct

[lukeaduncan]

Need to ask for clarity on which use case is an issue.

[lukeaduncan]

Added as open issue FAIS-007 to continue to review.