Give the citizen a reliable health data, secure and easy to use is not possible without an overview of all the business processes. These can be standardized and simplified if the critical issues are identified, evaluated and removed. In the conduct of information security governance, healthcare organizations can make use of the methodological approach of Health Technology Assessment (HTA).
HTA is a multidisciplinary methodology that evaluates the real effects of a technology and/or a process across multiple dimensions such as efficacy, security, costs, social and organizational impact. In particular, the HTA analysis conducted on existing technologies and processes may highlight critical situations, such as the core assets that, although widely used, may be outdated and inadequate. The possible disinvestment of obsolete technologies and processes, if conducted according to HTA criteria, improves service to the citizen adhering to privacy regulations. Eliminate obsolete equipment also means removing the difficulties in fulfilling regulatory. Also with regard to the management of health data protection, the HTA multidisciplinary approach is in line with the indications of the General Data Protection Regulation on security of processing.
The exceptions in the standard processing add cost, complexity and redundancy in the system, to the detriment of the proper functioning of healthcare organizations. The proper use of HTA approach provides a tool capable of affecting these sources of inefficiency, waste and risk.
The activities to be performed in the field of data protection are certainly remarkable. Inevitable resistances increase the difficulties, and it’s impossible to innovate whithout resolve them. Most likely, most of the energy must be expended in removing the opposition to technological and organizational change, often related to the existence of technical / operational constraints, but also to insufficient managerial determination.