National Health Information Seminar: Better data, better decisions October 2017

1. DATA PROTECTION AND
HEALTH INFORMATION
National Health Information: better data, better decisions
Dublin Castle – 4th October 2017
Office of the Data Protection Commissioner
Cathal Ryan
@DPCIreland

2. •The General Data Protection Regulation
•Implications for the Health Sector (Unpacking the
GDPR)
•Developments and future updates
Outline

3. Charter of Fundamental Rights
Rationale for new data protection laws

4. Seismic Impact
General Data Protection
Regulation – dead
ahead……

6. “Before anything else, preparation is key to success”

7. Harmonisation Transparency Accountability Enforcement GAME
CHANGER
GDPR - THE “BIG TICKET” ITEMSGDPR’s “big ticket” items

8. Data Integrity
Pseudonymisation
Anonymisation
Cryptography
Accountability
Data Protection
Officer
Data Protection
Impact
Assessments
Data minimisation
Notification of
Personal Data
Breaches

9. • Definitions (Article 4)
• Article 9
• Heads 17 and 18 DP Bill
• Article 89 and Head 25 DP Bill
Unpacking the GDPR – Health Data

10. Unpacking the GDPR – Health Data
• Consent
• Processors
• Transfers

11. Official Resources
GDPR & DP BILL
Article 29
www.gdprandyou.ie

12. Article 29 Working Party Opinions Pipeline
DPIA
CONSENT
TRANSPARENCY

13. Article 29 eGOV Subgroup
Mobile Health Apps
Codes in the Pipeline
Procedures Opinion

15. • DP & GDPR SHOULD BE SEEN AS AN ENABLER RATHER THAN
INHIBITOR TO INNOVATION
• EXPLICIT CONSENT IS NOT THE ONLY LEGAL BASIS
• DIGITISATION OF HEALTH SERVICES REQUIRES ASSURANCE THAT AN
APPROPRIATE LEVEL OF RESOURCES AND OVERSIGHT WILL BE
CONTINUALLY MAINTAINED TO ENSURE INTEGRITY AND SECURITY OF
SYSTEMS
• TRANSPARENCY IS AN ESSENTIAL COMPONENT TO THE
SUCCESSFUL ROLL OUT OF A DIGITISED HEALTH SERVICE
Takeaways

16. www.dataprotection.ie
@DPCIreland