I'm doing research on coding requirements for medical applications but I can't find anything useful/structured. Basically I'm looking for structured (if possible XML file) document with the list of security requirement. For example what kind of encryption they should use, what features of the app should be disabled by the default, what log info should be stored and how to store it, etc.
Of course requirements can be different for different apps and companies, i just need some general information and if possible for the US.
International Organization for Standardization (ISO): a non-governmental organization that develops and publishes international standards on a wide range of subject, including medical equipment.
The medical device manufacturer chooses to use OTS software, thus bearing responsibility for the security as well as the safe and effective performance of the medical device. The FDA encourages medical device manufacturers to address cybersecurity risks to keep patients safe and better protect the public health.
The HIPAA Privacy Rule The Rule requires appropriate safeguards to protect the privacy of protected health information and sets limits and conditions on the uses and disclosures that may be made of such information without an individual's authorization.
PHI is health information in any form, including physical records, electronic records, or spoken information. Therefore, PHI includes health records, health histories, lab test results, and medical bills.
For the US, you can check out the HIPAA guide for web programmers.
HL7 is what you need.
Some links:
http://aurora.regenstrief.org/security/
http://www.hl7.org.au/docs/HL7-Sec.htm
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With