ASTM E1869-04(2014)
(Guide)Standard Guide for Confidentiality, Privacy, Access, and Data Security Principles for Health Information Including Electronic Health Records (Withdrawn 2017)
Standard Guide for Confidentiality, Privacy, Access, and Data Security Principles for Health Information Including Electronic Health Records (Withdrawn 2017)
SIGNIFICANCE AND USE
4.1 Many U.S. healthcare and health information systems leaders believe that electronic health information systems that include computer-based patient records will improve health care. To achieve this goal these systems will need to protect individual privacy of patient data, provide appropriate access, and use adequate data security measures. Sound information policies and practices must be in place prior to the wide-scale deployment of health information systems. Strong enforceable privacy policies must shape the development and implementation of these systems.
4.2 The purposes of patient records are to document the course of the patient's illness or health status during each encounter and episode of care; to furnish documentary evidence of the course of the patient's health evaluation, treatment and change in condition; to document an individual's health status; to provide data for preventive care; to document communication between the practitioner responsible for the patient's care and any other healthcare practitioner who contributes to the patient's care; to assist in protecting the legal interest of the patient, the health care facility and the responsible practitioner; to provide continuity of care; to provide data to substantiate insurance claims; to provide a basis for evaluating the adequacy and appropriateness of care; and to provide data for use in continuing education and research.
4.3 Health information is a broad concept. It includes all information related to an individual's physical and mental health, the provision of health care generally, and payment for health care. The patient record is a major component of the health information system. The creation of electronic databases and communication protocols to transfer data between systems presents new opportunities to implement more effective systems for health information, to enhance patient care, reduce the cost of health care, and improve patient outcomes. National standards guide all that ...
SCOPE
1.1 This guide covers the principles for confidentiality, privacy, access, and security of person identifiable health information. The focus of this standard is computer-based systems; however, many of the principles outlined in this guide also apply to health information and patient records that are not in an electronic format. Basic principles and ethical practices for handling confidentiality, access, and security of health information are contained in a myriad of federal and state laws, rules and regulations, and in ethical statements of professional conduct. The purpose of this guide is to synthesize and aggregate into a cohesive guide the principles that underpin the development of more specific standards for health information and to support the development of policies and procedures for electronic health record systems and health information systems.
1.2 This guide includes principles related to:
Section
Privacy
7
Confidentiality
8
Collection, Use, and Maintenance
9
Ownership
10
Access
11
Disclosure/Transfer of Data
12
Data Security
13
Penalties/Sanctions
14
Education
15
1.3 This guide does not address specific technical requirements. It is intended as a base for development of more specific standards.
WITHDRAWN RATIONALE
Formerly under the jurisdiction of Committee E31 on Healthcare Informatics, this guide was withdrawn in March 2017. This standard is being withdrawn without replacement due to its limited use by industry.
General Information
Relations
Standards Content (Sample)
NOTICE: This standard has either been superseded and replaced by a new version or withdrawn.
Contact ASTM International (www.astm.org) for the latest information
Designation:E1869 −04 (Reapproved 2014) An American National Standard
Standard Guide for
Confidentiality, Privacy, Access, and Data Security
Principles for Health Information Including Electronic Health
Records
This standard is issued under the fixed designation E1869; the number immediately following the designation indicates the year of
original adoption or, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. A
superscript epsilon (´) indicates an editorial change since the last revision or reapproval.
1. Scope E1384 Practice for Content and Structure of the Electronic
Health Record (EHR)
1.1 This guide covers the principles for confidentiality,
E1714 Guide for Properties of a Universal Healthcare Iden-
privacy, access, and security of person identifiable health
tifier (UHID)
information. The focus of this standard is computer-based
E1762 Guide for Electronic Authentication of Health Care
systems; however, many of the principles outlined in this guide
Information
alsoapplytohealthinformationandpatientrecordsthatarenot
E1769 Guide for Properties of Electronic Health Records
in an electronic format. Basic principles and ethical practices
and Record Systems
for handling confidentiality, access, and security of health
E1986 Guide for Information Access Privileges to Health
informationarecontainedinamyriadoffederalandstatelaws,
Information
rules and regulations, and in ethical statements of professional
E1987 Guide for Individual Rights Regarding Health Infor-
conduct. The purpose of this guide is to synthesize and
mation (Withdrawn 2007)
aggregate into a cohesive guide the principles that underpin the
E1988 Guide for Training of Persons who have Access to
development of more specific standards for health information
Health Information (Withdrawn 2007)
and to support the development of policies and procedures for
E2017 Guide for Amendments to Health Information
electronic health record systems and health information sys-
E2147 Specification for Audit and Disclosure Logs for Use
tems.
in Health Information Systems
1.2 This guide includes principles related to:
3. Terminology
Section
Privacy 7
3.1 Definitions:
Confidentiality 8
Collection, Use, and Maintenance 9 3.1.1 access—the provision of an opportunity to approach,
Ownership 10
inspect, review, retrieve, store, communicate with, or make use
Access 11
ofhealthinformationsystemresources(forexample,hardware,
Disclosure/Transfer of Data 12
Data Security 13 software, systems or structure) or patient identifiable data and
Penalties/Sanctions 14
information, or both.
Education 15
3.1.2 authentication:—
1.3 This guide does not address specific technical require-
3.1.2.1 authentication (data entry)—to authorize or validate
ments.Itisintendedasabasefordevelopmentofmorespecific
an entry in a record by a signature including first initial, last
standards.
name, and discipline or a unique identifier allowing identifica-
tion of the responsible individual.
2. Referenced Documents
3.1.2.2 authentication (data origin/sender)—corroboration
2.1 ASTM Standards:
that the source/sender of data received is as claimed.
3.1.2.3 authentication (user/receiver)—the provision of as-
This guide is under the jurisdiction of ASTM Committee E31 on Healthcare
surance of the claimed identity of an entity/receiver.
Informatics and are the direct responsibility of Subcommittee E31.25 on Healthcare
Data Management, Security, Confidentiality, and Privacy.
3.1.3 authorize—the granting to a user the right of access to
Current edition approved April 1, 2014. Published April 2014. Originally
specified data and information, a program, a terminal, or a
approvedin1997.Lastpreviouseditionapprovedin2010asE1869–04(2010).DOI:
process.
10.1520/E1869-04R14.
For referenced ASTM standards, visit the ASTM website, www.astm.org, or
contact ASTM Customer Service at service@astm.org. For Annual Book of ASTM
Standards volume information, refer to the standard’s Document Summary page on The last approved version of this historical standard is referenced on
the ASTM website. www.astm.org.
Copyright © ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959. United States
E1869−04 (2014)
3.1.4 clinical data centers—all computer-based (and contained in that information. This analysis permits determi-
manual) systems which handle and store patient records and nation of the individual’s identity based on a combination of
health information, for example, solo practitioners, clinics, facts associated with that person even though specific identi-
hospitals, state departments of health, data centers, and health fiershavebeenremoved,likenameandsocialsecuritynumber.
maintenance organizations.
3.1.14 information—data that have been processed for use;
3.1.5 clinical information—data and information collected
human interpretation of data; data that have been processed
from the patient or patient’s family by a healthcare practitioner into a meaningful form.
or healthcare organization. A healthcare practitioner’s objec-
3.1.15 informed consent—informed consent requires that
tive measurement or subjective evaluation of a patient’s
individuals be informed, in advance, of the information being
physical or mental state of health, descriptions of an individu-
collected from them, or generated, and the purposes for which
al’s health history and family health history, diagnostic studies,
it will be used; and be given an opportunity to accept, reject, or
decision rationale, descriptions of procedures performed,
modify the terms presented. Central to the principle of in-
findings, therapeutic interventions, medications prescribed,
formed consent is providing individuals with the ability to
description of responses to treatment, prognostic statements
control the use of information once collected. The general rule
and descriptions of socioeconomic factors, and environmental
is that information collected for one purpose must not be used
factors related to the patient’s health.
for another purpose without the individual’s consent. In
3.1.6 computer-based patient record—see patient record.
practice, this requires that no use or disclosure occur, except to
a documented request by, or with the prior consent of, the
3.1.7 confidential—status accorded to data or information
individual to whom the record pertains unless the disclosure is
indicating that it is sensitive for some reason, and therefore it
permitted by law. Under some circumstances a guardian or
needs to be protected against theft, disclosure, or improper use,
designee may consent on behalf of the individual.
or both, and must be disseminated only to authorized individu-
als or organizations with a need to know.
3.1.16 informational privacy—(1) a state or condition of
3.1.8 data—collection of elements on a given subject; controlled access to personal information. (2) The ability of an
individual to control the use and dissemination of information
things known, given, or assumed, as the basis for decision
making; the raw material of information systems expressed in that relates to himself or herself. (3) The individual’s ability to
control what information is available to various users and to
text, numbers, symbols and images; facts.
limit redisclosures of information.
3.1.9 data protection measure—a planned operation, for
example, procedure, policy, program, or technology, employed 3.1.17 patient record:—
intheprivacysystemtoprevent,detect,orsanctionbreachesof 3.1.17.1 longitudinal patient record—a permanent, coordi-
security. nated patient record of significant information, in chronologi-
cal sequence. It may include all historical data collected or be
3.1.10 disclosure—to release, transfer, or otherwise divulge
retrieved as a user designated synopsis of significant
confidential health information to any entity other than the
demographic, genetic, clinical and environmental facts and
individual who is the subject of such information.
events maintained within an automated system.
3.1.11 health care—(1) preventive, diagnostic, therapeutic,
3.1.17.2 patient health record—the primary legal record
rehabilitative, maintenance, or palliative care, public health,
documenting the healthcare services provided to a person, in
counseling, service, or procedure with respect to the physical
any aspect of healthcare delivery.
or mental condition of an individual; or affecting the structure
Discussion—The term patient health record is synonymous
or function of the human body; or (2) any sale or dispensing of
with: medical record, patient care record, hospital record,
a drug, device, equipment, or other item to an individual, or for
clinical record, client record, resident record, electronic medi-
the use of an individual, pursuant to a prescription.
cal record, and computer-based patient record. The term
3.1.12 health information—anyinformation,whetheroralor
includes routine clinical or office records, hospital records,
recorded in any form or medium (1) that is created or received
recordsofcareinanyhealth-relatedsetting,researchprotocols,
by a health care provider; a health plan; health researcher,
preventivecare,lifestyleevaluation,specialstudyrecords,and
public health authority, instructor, employer, life insurer,
various clinical databases.
school or university; health care clearinghouse, health infor-
3.1.17.3 patient record system—the set of components that
mation service or other entity that creates, receives, obtains,
form the mechanism by which patient records are created,
maintains, uses, or transmits health information; a health
used, stored, and retrieved. A patient record system is usually
oversight agency, a health information service organization, or
located within a healthcare provider/practitioner setting. It
(2) that relates to the past, present, or future physical or mental
includes people, data, rules and procedures, processing and
health or condition of an individual, the provision of health
storage devices (for example, paper and pen, hardware and
care to an individual, or the past, present, or future payment for
software), and communications and support function.
the provision of health care to an individual; and (3) that
identifies the individual, with respect to which there is a
3.1.17.4 secondary patient record—a record that is derived
reasonable basis to believe that the information can be used to
from the primary health record and contains selected data
identify the individual.
elements to aid nonclinical persons (that is, persons not
3.1.13 inference—refers to the ability to deduce the identity involved in direct patient care) in supporting, evaluating, or
of a person associated with a set of data through “clues" advancing patient care. Patient care support refers to
E1869−04 (2014)
administration, regulation, and payment functions. Patient care 4. Significance and Use
evaluation refers to quality assurance, utilization management,
4.1 Many U.S. healthcare and health information systems
and medical or legal audits. Patient care advancement refers to
leaders believe that electronic health information systems that
research. These records are often combined to form a second-
include computer-based patient records will improve health
ary database, for example, an insurance claims database.
care. To achieve this goal these systems will need to protect
3.1.18 personally identifiable health information—health individual privacy of patient data, provide appropriate access,
and use adequate data security measures. Sound information
information which contains an individual’s identifiers (name,
social security number) or contains a sufficient number of policies and practices must be in place prior to the wide-scale
deployment of health information systems. Strong enforceable
variables to allow identification of an individual.
privacy policies must shape the development and implementa-
3.1.19 practitioner (licensed/certified)—anindividualatany
tion of these systems.
level of professional specialization who requires a public
license to deliver health care to individuals. An individual at 4.2 The purposes of patient records are to document the
course of the patient’s illness or health status during each
any level of professional specialization who is certified by a
encounter and episode of care; to furnish documentary evi-
public agency or professional organization to provide health
denceofthecourseofthepatient’shealthevaluation,treatment
services to individuals. A practitioner may also be a provider.
and change in condition; to document an individual’s health
3.1.20 privacy—the right of individuals to be left alone and
status; to provide data for preventive care; to document
to be protected against physical or psychological invasion or
communication between the practitioner responsible for the
the misuse of their property. It includes freedom from intrusion
patient’s care and any other healthcare practitioner who con-
or observation into one’s private affairs, the right to maintain
tributes to the patient’s care; to assist in protecting the legal
control over certain personal information, and the freedom to
interest of the patient, the health care facility and the respon-
act without outside interference. See also informational pri-
sible practitioner; to provide continuity of care; to provide data
vacy.
to substantiate insurance claims; to provide a basis for evalu-
3.1.21 privilege—the individual’s right to hold private and
ating the adequacy and appropriateness of care; and to provide
confidential the information given to a healthcare provider in
data for use in continuing education and research.
the context of a professional relationship. The individual may,
4.3 Health information is a broad concept. It includes all
by overt act of consent or by other means, waive the right to
information related to an individual’s physical and mental
privilege. For example, if a patient brings a lawsuit against a
health, the provision of health care generally, and payment for
facilityandtherecordsareneededtopresentthefacility’scase,
health care. The patient record is a major component of the
the privilege is waived.
healthinformationsystem.Thecreationofelectronicdatabases
3.1.22 provider—a business entity which furnishes health
and communication protocols to transfer data between systems
care to a consumer; it includes a professionally licensed
presents new opportunities to implement more effective sys-
practitioner who is authorized to operate a healthcare delivery
tems for health information, to enhance patient care, reduce the
facility.
cost of health care, and improve patient outcomes. National
standards guide all that have responsibilities for re
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.