DD ISO/TS 25237:2008

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Symbols (and abbreviated terms)
5 Requirements for privacy protection of identities in healthcare
  5.1 A conceptual model for pseudonymization of personal data
  5.2 Categories of data subject
  5.3 Classification of data
  5.4 Trusted services
  5.5 Need for re-identification of pseudonymized data
  5.6 Pseudonymization service characteristics
6 Pseudonymization process (methods and implementation)
  6.1 Design criteria
  6.2 Entities in the model
  6.3 Workflow in the model
  6.4 Preparation of data
  6.5 Processing steps in the workflow
  6.6 Protecting privacy protection through pseudonymization
7 Re-identification process (methods and implementation)
8 Specification of interoperability of interfaces (methods and
  implementation)
9 Policy framework for operation of pseudonymization services
  (methods and implementation)
  9.1 General
  9.2 Privacy policy
  9.3 Trustworthy practices for operations
  9.4 Implementation of trustworthy practices for re-identification
Annex A (informative) - Healthcare pseudonymization scenarios
Annex B (informative) - Requirements for privacy risk assessment
        design
Bibliography

Provides principles and requirements for privacy protection using pseudonymization services for the protection of personal health information.

This Technical Specification contains principles and requirements for privacy protection using pseudonymization services for the protection of personal health information. This technical specification is applicable to organizations who make a claim of trustworthiness for operations engaged in pseudonymization services.

This Technical Specification:

• defines one basic concept for pseudonymization;

• gives an overview of different use cases for pseudonymization that can be both reversible and irreversible;

• defines one basic methodology for pseudonymization services including organizational as well as technical aspects;

• gives a guide to risk assessment for re-identification;

• specifies a policy framework and minimal requirements for trustworthy practices for the operations of a pseudonymization service;

• specifies a policy framework and minimal requirements for controlled re-identification;

• specifies interfaces for the interoperability of services interfaces.