The ministry wants to take system and data security to a higher level together with the healthcare sector. The GDPR ensures that the protection of personal data in Europe is as equal as possible and that there are sufficient guarantees, so that citizens can rely even better on the protected processing of their personal data. And therefore applies to every company, institution and organization that has personal data.
Get rich faster with medical personal data
Did you know that the value of medical personal data yields approximately 50 times more on the “Dark Web” than ordinary personal data or even financial data such as credit card data?
This makes healthcare a particularly vulnerable sector. In addition, healthcare also contains a great deal of (medical) personal data, which are consulted intensively. This is how so-called “data breaches”, which happen accidentally, are created. Think, for example, of sending personal data to an outdated address. Or where medical personal data is sent to the wrong recipient and vice versa. Before 2017, these kinds of incidents were annoying for those involved. But met a sincere written apology to the recipient and the patient concerned. Since the Personal Data Protection Act and soon the AVG, these incidents can have more impact. Certainly when the healthcare institution has taken insufficient measures to prevent data leaks.
Care is made by people
Technically there are possibilities, for example to send certain data against to keep. This is easy to do with a so-called e-mail gateway and a web gateway. But this doesn't cover everything. There are also many measures to be taken against theft, by means of malware and cyber attacks. Yet every study shows that data leakage could have been prevented with more security-conscious employees. Popularly: “Security awareness”. You don't do this once on a Friday afternoon. It requires a thorough program that not only changes behavior and provides employees with sufficient knowledge of security. A good program also has an eye for employee motivation and commitment. If you would like to know what this could look like for your company or institution, please contact us. We are happy to advise you about it.