Working towards a national health information system in Australia.
One of the major administrative dilemmas facing the Australian national health care system is the need to reform practices associated with massive data-information overload. The current system is burdened with paper-based administrative forms, patient record files, referral notes and other manual methods of data organisation. An integrated computer-based information system may be perceived as an attractive solution to such burdens. However, computerisation must not be seen as a panacea with the possibility of exacerbating information overload and accentuating privacy concerns. Recent surveys in Australia [1] and the US [2] indicate a perceived causal link between computers and privacy invasion. Any moves toward a national health information system must counter this perception through macro-level education schemes of affected parties and micro-level mechanisms such as the establishment of hospital privacy officers. Such concerns may be viewed as a subset of the wider privacy debate, and information policy development should address such considerations to develop policies to prevent unauthorized access to personal information and to avoid the extraction and sale of sensitive health data. Conservative in nature and slow to change the health care sector may be forced to adopt more efficient work practices through the increasing proliferation of information technology (IT) in health care delivery and an escalating emphasis upon accountability and efficiency of the public health care dollar. The economic rationalist stance taken by governments in Australia and other nations generally will also force health care workers to adopt and develop more efficient information management practices, health indicators and best practice care methods than presently employed by this sector The benefits of a national health information system are far reaching, particularly in developing a more effective health care system through better identifying and understanding community health care trends and in applying IT to the efficient collection of data for the development of more appropriate performance measures and statistical indicators. A coherent and integrated approach is called for in the design of a national health information system which incorporates the necessary and requisite security features to meet privacy concerns. Protecting information privacy poses complex political, economic, technological, legal and social problems for systems developers and health care providers alike [2]. According to Brannigan [3] there are three components involved in the formulation and implementation of privacy: public policy (What level of privacy does society want?); legal structure (Does the law adequately provide for society's privacy requirements?); and technical (how much privacy can technical tools provide, at what cost, and with what effects on the system?). Examining technical tools alone, it is apparent that the necessary technologies are available in Australia to provide the security of medical records required by public policy. Such tools may include encryption, user and data authentication methods, authorisation schemes and mechanisms for the prevention of data inference. While none of these available measures are infallible, it is suitable for most applications where the encryption mechanism can provide protection for a given length of time. Australia needs to develop a coherent national health information infrastructure policy to ultimately avoid fragmented, duplicated and incompatible systems that rely on different standards and protocols. Such a policy will only work by addressing the key issue of patient privacy within a technological framework. The application of IT to health care systems is a sensitive social experiment affecting many professions including general practitioners, medical administrators, politicians, lawyers, computer specialists, privacy advocates and patients whose records will ultimately reside in the system. (abstract trun