UNE-EN ISO 25237:2017

This Technical Specification contains principles and requirements for privacy protection using pseudonymization services for the protection of personal health information. This technical specification is applicable to organizations who wish to undertake pseudonymization processes for themselves or to organizations who make a claim of trustworthiness for operations engaged in pseudonymization services.This Technical Specification:¾ðdefines one basic concept for pseudonymization;¾ðgives an overview of different use cases for pseudonymization that can be both reversible and irreversible;¾ðdefines one basic methodology for pseudonymization services including organizational as well as technical aspects;¾ðgives a guide to risk assessment for re-identification;¾ðspecifies a policy framework and minimal requirements for trustworthy practices for the operations of a pseudonymization service;¾ðspecifies a policy framework and minimal requirements for controlled re-identification;