Abstract: Health information is the most sensitive information attached to an individual. Although several appropriate policies, guidelines, and compliance regulations are established to protect health information, privacy and security breaches are central concerns for electronic healthcare systems. Here in this paper, we discuss these concerns and present a model of security and privacy deployed in the Methodist Environment for Translational and Outcomes Research (METEOR). METEOR was designed at Houston Methodist. Hospital and is comprised of two parts: the enterprise data warehouse (EDW) and an SIA software intelligence and analytics layer. This model signifies that patient confidentiality is most effectively maintained by employing a systematic combination of technologies and best practices like technical deidentification of information, restrictive data access, and security solutions in the base technical platforms. Our findings propose that the presented security model makes data security compromise and unauthorized access of safeguarded patient health information highly unlikely.
Keywords: Data Security, Privacy Management, Healthcare Information Security, Health Data Protection, Cybersecurity in Healthcare, Confidentiality.