[Health] Privacy Issues in Gnu Health

[Costante, E.]

Dear all,

 

I hope this is the right place to post my question.

 

I work in security and privacy and I am currently developing a solution to verify whether users of a system( especially in the e-health) abuse of their rights to access data they’re not supposed to see, violating, e.g. the patients’ privacy. To make an example, let’s say that using the gnu-health platform, a doctor manages to see the lab results of a patient that he is not treating, but just for personal interest (e.g. an ex-girlfriend ).

 

I see there is some access control in place in gnu-health but this is often not sufficient to avoid such situations.

 

Would be your community interested in the developing of a module able to detect such situations? My main concern is that I need something like the demo database to work with,  but more data is necessary  (5 patients are not enough for the techniques I intend to use as machine learning). Do you have perhaps a bigger dataset? Would be difficult to make it available?

 

Kind Regards,

 

Elisa.