BMJ - PKI and signinng slight confusion

[Brian Gladman]

----- Original Message -----
From: "Dr Alan Hassey" <alan.hassey@btinternet.com>
To: <ukcrypto@maillist.ox.ac.uk>
Sent: Sunday, September 10, 2000 10:45 PM
Subject: RE: BMJ - PKI and signinng slight confusion


> Always difficult to get these things inside the word length limit for
> articles. We should applaud the principles because this is a HUGE advance
on
> what happens to most NHS data....
> I have just heard of an example where a large practice (10 GPs) is going
to
> arrange with NHS Direct to do all their telephone triage. This means
giving
> NHS Direct access to the GP clinical system via NHSnet (a well known
> "secure" network...). The local ethical committee will pass it because
there
> are lots of advantages (& research dosh) riding on this. Patients won't be
> asked & there will be no encryption. I suggested that patients should be
> told what was proposed and explicit consent requested on a case by case
> basis for external access.... "er - is that really necessary - we don't
want
> to put patients off"
>
> ===
> Dr Alan Hassey (mailto:alan.hassey@btinternet.com)
> RCGP Health Informatics Group
> Joint Computing Group (GPC - RCGP)

Thank you, Alan, for trying to protect patient's interests in their medical
information.  I for one appreciate this.

Which organisation within the overall scope of the NHS is actually
responsible for holding a person's medical records, protecting their
integrity and preventing abuse?

    Brian