Modern Data Security/In Reply

Archives of Pathology & Laboratory Medicine,  Oct 2004  by Ulirsch, Rudolf C,  Klein, Robert R III,  Mount, David W,  Nagle, Ray B

• E-mail
• Print
• Link

To the Editor.-Recently, Klein et al1 provided a good discussion of data security and particularly emphasized basic modern file encryption concepts. More than 10 years ago, we described, emphasized, and published the importance of a more comprehensive approach to medical data security.2 Encryption of data is an important technique, but is only a part of the larger concept of information security. Despite keeping data stored in encrypted form, the information remains vulnerable to diversion in a myriad of ways before encryption and after decoding. Such decoded forms must exist at some point in order for the subject data to be of any practical use. Modern concepts particularly require integration of human factors in the security matrix, and this is emphasized in recent regulatory changes. The advent of Health Insurance Portability and Accountability Act regulations has certainly made fuller appreciation of these security concepts more important and timely.

RUDOLF C. ULIRSCH, MD

Department of Pathology

Terre Haute Regional Hospital

Terre Haute, IN 47802

1. Klein RR, Mount DW, Nagle RB. Modern data security. Arch Pathol Lab Med. 2004;128:3380-340.

2. Ulirsch RC, Ashwood ER, Noce P. Security in the clinical laboratory: guidelines or managing the information resource. Arch Pathol Lab Mod. 1990; 114:89-93.

In Reply.-We appreciate the comments from Dr Ulirsch and we agree. Medical data security is a broad topic involving the coordinated interaction of people and technologies, and the human factors should not be overlooked. In particular, the development of a culture of security is more important than any technology. The technology is there only as a tool for people to use judiciously.

ROBERT R. KLEIN III, MD

DAVID W. MOUNT, PhD

RAY B. NAGLE, MD, PhD

University of Arizona

Tucson, AZ 85745

Copyright College of American Pathologists Oct 2004
Provided by ProQuest Information and Learning Company. All rights Reserved