 |
|
The Electronic Health Record (eHR) Office has recently drummed up publicity and education surrounding the security and management of the Electronic Health Record Sharing System (eHRSS) accounts. Collaterals and guides have been released to strengthen understanding of how to use eHRSS properly and securely. |
|
|
| |
Patient privacy and data security have always been the top priorities in eHRSS operation, and healthcare providers have indispensable roles and responsibilities in this respect. While eHRSS has built in strong security measures to protect data privacy, every account user and user administrator of eHRSS is obliged to protect the security and privacy of patients’ health records by observing proper use and management of their accounts, and accesses to data and information in the system. They need to also beware of and take appropriate measures to guard against potential security threats to ensure that patients’ records will not be compromised. |
 |
| Unauthorised access to eHRSS is unlawful and strictly prohibited |
|
|
|
| |
| Useful Tips on eHRSS User Account Management |
| Each authorised user of eHRSS is assigned a unique account for accessing the system according to his/ her roles and duties in delivering patient care. As one of the major rules to safeguard eHRSS data privacy and minimise security risks, a user should access eHRSS only with his/ her own account. Below are some important tips for account users and user administrators - |
| |
|
|
|
Don’t disclose or share user name, password and security token |
|
|
Keep account login information and security token safe (e.g. avoid writing down the password) |
|
|
Report lost security token and suspicious access immediately |
|
|
|
| |
|
|
|
Ensure only authorised healthcare professionals (HCProfs) can access patients’ eHRs |
|
|
Close the accounts of departed users timely |
|
|
Report suspicious access immediately |
|
|
|
| |
An e-leaflet highlighting the above messages has been produced for HCPs’ reference. Entitled "Keep Your User Account Safe", the e-leaflet can be viewed and downloaded at the eHRSS website.
Cyber Security Tips
To help HCPs protect patients’ information and eHRs when using computers connected to eHRSS via the Internet, a new "Cyber Security Tips" corner has been set up on the eHRSS website to provide some useful tips and reference information on cyber security. Apart from general advice, specific tips on the following are covered:
|
|
prevent malware infection |
|
|
defend against ransomware attacks |
|
|
secure mobile devices |
|
|
prepare for security incident handling |
|
|
|
|
| |
| Frequently Asked Questions |
| The Frequently Asked Questions page of the eHRSS website has also been enriched to include common questions from HCPs and HCProfs regarding the use of eHRSS accounts and security requirements. To know more, please visit the below pages - |
| |
| Use of eHRSS by HCProfs |
https://www.ehealth.gov.hk/en/healthcare-provider-and-professional/support/technical-support/view-eHRs.html |
| Operation and Security |
https://www.ehealth.gov.hk/en/whats-ehealth/security-and-privacy.html |
| |
|
| |
|
