Interpretation on Population Health Information Management Measures (Trial Implementation)

(chinadaily.com.cn)

Updated: 2014-06-15

4. Mandatory administration requirements

Units in charge should strictly follow national laws and regulations when entrusting other institutes with population health information storage, operation and maintenance. They should make sure the entrusted institutes have necessary qualifications and hold them accountable for health information management and safety. The entrusted institutes should strictly follow work protocol in offering technical support for health information management, and avoid unauthorized information collection, development and utilization.

5. Change management requirements

When responsibilities change, units in charge shall safely hand over intact population health information to superior departments or other institutes taking over, and avoid health information damage and loss.

Population health information utilization

The purpose of population health information utilization should be to improve medical research, scientific decision-making and convenient service for the public in order to serve public health.

1. Categorized utilization

Units should take steps to realize population health information interconnectivity and sharing, based on informatization planning, and offer various population health services and management. The population health information statistical yearbook and other information required by law to be open to the public should be released in time. It is forbidden to leak out confidential and private information.

2. Authorized utilization

Units in charge shall establish a population health information comprehensive utilization system and authorize relevant use of population health information. Units or individuals that need to have access to health information should file written applications to the unit in charge. The two sides should sign a data use agreement to clarify the way, content and purpose of data utilization as well as responsibilities for all consequences. Approved units or individuals shouldn’t utilize and release population health information beyond the scope of authorization, offer health information to others, or use it in a way that would cause damage to the rights and interests of citizens, social order and national security.

3. Utilization of one’s own health information

The units in charge should offer individual health information safe inquiry and replication services and ensure no unauthorized disclosure of private information.

Information security and privacy protection requirements

1. Strengthen information security

Units should set up an information safety protection and sound safety management system, standardized operational procedures and technical norms to ensure population health information system security. Units should protect privacy during health information collection, management and use to ensure population health information security. Units should avoid privacy information leaks.