ISO 22857:2013

Health informatics — Guidelines on data protection to facilitate trans-border flows of personal health data

ISO 22857:2013 provides guidance on data protection requirements to facilitate the transfer of personal health data across national or jurisdictional borders. It is normative only in respect of international or trans-jurisdictional exchange of personal health data. However it can be informative with respect to the protection of health information within national/jurisdictional boundaries and provide assistance to national or jurisdictional bodies involved in the development and implementation of data protection principles. ISO 22857:2013 covers both the data protection principles that apply to international or trans-jurisdictional transfers and the security policy which an organization adopts to ensure compliance with those principles. ISO 22857:2013 aims to facilitate international and trans-jurisdictional health-related applications involving the transfer of personal health data. It seeks to provide the means by which health data relating to data subjects, such as patients, will be adequately protected when sent to, and processed in, another country/jurisdiction.

Informatique de santé — Lignes directrices sur la protection des données pour faciliter les flux d'information sur la santé du personnel de part et d'autre des frontières

General Information

• Status: Published
• Publication Date: 09-Dec-2013
• ICS: 35.240.80 - IT applications in health care technology
• Technical Committee: ISO/TC 215 - Health informatics
• Drafting Committee: ISO/TC 215/WG 4 - Security, Safety and Privacy
• Current Stage: 9020 - International Standard under periodical review
• Start Date: 15-Apr-2024
• Completion Date: 15-Apr-2024

Relations

• Revises: ISO 22857:2004 - Health informatics — Guidelines on data protection to facilitate trans-border flows of personal health information
• Effective Date: 18-Dec-2008

Standards Content (Sample)

INTERNATIONAL ISO
STANDARD 22857
Second edition
2013-12-15
Health informatics — Guidelines on
data protection to facilitate trans-
border flows of personal health data
Informatique de santé — Lignes directrices sur la protection des
données pour faciliter les flux d’information sur la santé du personnel
de part et d’autre des frontières
Reference number
ISO 22857:2013(E)
©
ISO 2013

---------------------- Page: 1 ----------------------
ISO 22857:2013(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO 2013
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [e-mail]
Web www.iso.org
Published in Switzerland
ii © ISO 2013 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 22857:2013(E)

Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 3
5 Structure of this International Standard . 3
6 General principles and roles . 3
6.1 General principles . 3
6.2 Roles . 4
7 Legitimising data transfer . 4
7.1 The concept of “adequate” data protection . 4
7.2 Conditions for legitimate transfer . 5
8 Criteria for ensuring adequate data protection with respect to the transfer of personal
health data . 6
8.1 The requirement for adequate data protection . 6
8.2 Content principles . 6
8.3 Procedural/enforcement mechanisms. 9
8.4 Contracts .10
8.5 Overriding laws .
...