Please use this identifier to cite or link to this item: http://hdl.handle.net/10125/41598

A Framework for Evaluating the Tension between Sharing and Protecting Health Information

File SizeFormat 
paper0449.pdf212.47 kBAdobe PDFView/Open

Item Summary

Title: A Framework for Evaluating the Tension between Sharing and Protecting Health Information
Authors: Anderson, Chad
Baskerville, Richard
Kaul, Mala
Keywords: ethical control reasoning
exposure control reasoning
health information exchange
information security policy
interoperability
Issue Date: 04 Jan 2017
Abstract: Health information exchange (HIE) is expected to improve the quality and cost of healthcare but sustained use of HIE by providers has been difficult to achieve. A number of factors play a role in that process including concern for the security and privacy of the exchanged information. This tension between the expected benefits of HIE resulting from collaboration and information sharing on the one hand, and the potential security risks inherent in the exchange process on the other hand, is not well understood. We propose an information security control theory to explain this tension. We evaluate this theory through a case study of the iterative development of the information security policy for an HIE in the western United States. We find that the theory offers a good framework through which to understand the information security policy development process.
Pages/Duration: 10 pages
URI/DOI: http://hdl.handle.net/10125/41598
ISBN: 978-0-9981331-0-2
DOI: 10.24251/HICSS.2017.440
Rights: Attribution-NonCommercial-NoDerivatives 4.0 International
Appears in Collections:Security and Privacy Challenges for Healthcare Minitrack



Items in ScholarSpace are protected by copyright, with all rights reserved, unless otherwise indicated.