Barriers to the Application of a Risk-Based Approach in the Management of Medical Data in Medical Entities

• Autorzy: Wojciech Krówczyński
• Języki publikacji: EN

Abstrakty

EN

The article aims to define the barriers to the application of a risk-based approach in the management of medical data in medical entities, in connection with the Regulation of the European Parliament and the EU Council of 27 April 2016, on the protection of personal data (GDPR). Medical entities manage personal data of special importance regarding the health of patients. The progressive development of information technology creates new information channels and at the same time many unprecedented threats related to their improper use. GDPR requires the healthcare provider to identify the risk of losing the safety of medical data and to determine the level of its significance. The article presents the nature and types of risk in business, and then describes the risk-based approach to managing medical data, as required by GDPR. As a result of this analysis, barriers have been identified in the application of a risk-based approach to the processing and protection of medical data in healthcare entities. The value of the article also lies in the systematization of sources and types of risk related to the management of medical data. The results of the analysis constitute a valuable contribution to the conceptualization of risk in the management of medical data, on the grounds of economics and management. Moreover, they are of great practical importance in the process of introduction and further implementation of the requirements of GDPR in healthcare entities. The article is conceptual and based on the analysis of the subject literature and participant observation. (original abstract)

Słowa kluczowe

EN

Risk based approach; Management; Medical data

PL

Podejście oparte na ryzyku; Zarządzanie; Dane medyczne

• Czasopismo: Business and Non-profit Organizations Facing Increased Competition and Growing Customers' Demands
• Rocznik: 2018
• Tom: 17
• Strony: 217--233

Twórcy

autor

Wojciech Krówczyński

• Jagiellonian University, Poland

Bibliografia

• Bizon-Górecka, J. (2004). Koszty ryzyka w przedsiębiorstwie w ujęciu komplementarnym. Rynek Terminowy, 2, 48-54.
• Bizon-Górecka, J., & Górecki, J. (2013). Analiza ryzyka w przedsiębiorstwie zarządzanym procesowo. Przedsiębiorczość i Zarządzanie, 14(12), 209-223.
• Golinowska, S. (2015). Od Ekonomii do Ekonomiki Zdrowia. Warszawa: Wydawnictwo Naukowe PWN.
• PMBOK Guide. (2017). A Guide to the Project Management Body of Knowledge. Philadelphia: Project Management Institute.
• Klimczak, K.M. (2008). Ryzyko w teorii ekonomii. Master of Business Administration, 6, 64-69.
• Knight, F.H. (1921). Risk, Uncertainty and Profit. New York: Hart, Schaffner and Marx.
• Kokot-Stępień, P. (2015). Identyfikacja ryzyka jako kluczowy element zarządzania ryzykiem w przedsiębiorstwie. Zeszyty Naukowe Uniwersytetu Szczecińskiego. Finanse. Rynki finansowe. Ubezpieczenia, 74, 533-544.
• Krówczyński, W., & Gancarczyk, M. (2017). The protection of patients' personal data in healthcare entities - the role of institutions. In A. Nalepka & A. Ujwary-Gil (Eds.). Business and Non-Profit Organizations Facing Increased Competition and Growing Customers' Demands, (Vol. 16, pp. 489-503). Nowy Sącz: Wyższa Szkoła Biznbesu - National Louis University. Warsaw: Institute of Economics, Polish Academy of Sciences. Nowy Targ: Cognitione Foundation for the Dissemination of Knowledge and Science.
• Liderman, K. (2006). Zarządzanie ryzykiem jako element zapewniania odpowiedniego poziomu bezpieczeństwa teleinformatycznego. Biuletyn Instytutu Automatyki i Robotyki, 12, 37-77.
• Nieszporska, S. (2012). Ryzyko w ochronie zdrowia. Logistyka, 5, 149-152.
• Williamson, O.E. (1998). Transaction cost economics: How it works, where it is headed. The Economist, 146(1), 23-58.
• Wołoszyn-Cichocka, A., & Lubeńczuk, G. (2015). Działalność lecznicza - pojęcie oraz formy i zasady wykonywania. Studia Iuridica Lublinensia, 23, 65.