What Is Health Information Management?

On May 5, 2014, the National Health and Family Planning Commission issued the "Health Management Information for Population (Trial)" with National Health Planning and Development [2014] No. 24. The "Measures" have a total of 23 articles and will be implemented as of the date of issue.

Population Health Information Management Measures (Trial)

Right!

On May 5, 2014,

Notice of the National Health and Family Planning Commission on Printing and Distributing the "Administrative Measures on Population Health Information (Trial)"

Health and Family Planning Commissions (Bureau of Health, Population and Family Planning Commissions) of provinces, autonomous regions and municipalities,

Population Health Information Management Measures (Trial)

The first is the norm

I. Background of the "Public Health Information Management Measures (Trial)"

With the rapid and comprehensive advancement of population health informatization and the rapid development and application of new technologies, the amount of data on population health information such as electronic health files, electronic medical records, and total population information generated by various types of medical and health family planning service agencies across the country has increased. The larger and larger, the wider the scope of the interconnection and sharing of population health information, and the increasing demand for the use of population health information to serve the public health. At the same time, the security threats facing population health information are also increasing. It is urgent to learn from international beneficial experiences and practices, study and formulate population health information management specifications, further strengthen population health information management, ensure population health information security, and protect citizens' personal privacy.

In order to promote the standardized use and effective protection of population health information resources, after participating in research from multiple parties, soliciting public opinions and organizing expert discussions, the National Health and Family Planning Commission formulated the "Management Methods for Population Health Information (Trial)". The purpose is to further standardize and strengthen the collection, management, utilization, security, and privacy protection of population health information at various levels of medical and family planning service agencies at all levels, clarify management and security responsibilities, and on the premise of ensuring the security of population health information and protecting personal privacy, Promote the interconnection and sharing of population health information, and promote the scientific development of population health informationization and health and family planning.

2. Scope of the "Administrative Measures on Population Health Information (Trial)"

The Measures for the Management of Population Health Information (for Trial Implementation) is applicable to the collection, management, use, security and privacy protection of population health information at various levels of various types of medical and family planning service agencies (including Chinese medicine service agencies). Medical and family planning service agencies at all levels and various levels are responsible units in the management of population health information. They should follow the rules of laws and regulations, follow medical ethical principles, ensure information security, and protect personal privacy.

How to understand the basic content of population health information

Population health information refers to the basic population information and medical service information generated by various types of medical and health family planning service agencies in the process of service and management in accordance with national laws and regulations and job responsibilities. It mainly includes the entire population, electronic health records, Electronic medical records and demographic health information.

How to understand the working principles of population health information management

The first is overall planning and unified standards. The National Health and Family Planning Commission made overall plans for the development of population health information and related management specifications, and unifiedly formulated the standards for population health information. All responsible units carry out various management tasks of population health information in accordance with a unified plan and standards.

The second is territorial management with consistent responsibilities. In accordance with the current administrative division of health and family planning, the responsibilities of local health and family planning administrative departments are implemented. The local health and family planning administrative departments at all levels are responsible for promoting, guiding, and supervising the management of population health information in their respective administrative areas, and strengthening the responsibility of territorial management. Responsible units should organize and implement their own power and health information management authority, clarify job responsibilities, and implement various work requirements. Health and family planning administrative departments and responsible units at all levels bear the corresponding responsibilities due to poor management or improper exercise of their powers.

The third is to ensure safety, convenience and efficiency. Population health information involves personal privacy. The application of big data mining is related to social stability and security, and high social attention. The basic requirements for ensuring the security of population health information and protecting personal privacy are the basic requirements. On this basis, the comprehensive development and utilization of population health information is promoted and improved. The ability and management level of the health and family planning system to serve the public health.

V. Requirements for Responsible Units to Collect Population Health Information

The first is to ensure the quality of collection. Responsible units should establish a complete quality control management system, clarify job responsibilities, strictly implement relevant standards and procedures, ensure the authenticity and integrity of collected data from the source, and achieve unified standards, standardized terms, and accurate content. Be responsible for.

The second is to follow the principle of "one source, one source at least." The responsible unit shall ensure the uniqueness of the identity of service and management objects in the information system, the consistency of basic data items, facilitate the sharing and use of information, and avoid repeated collections and multiple collections, that is, "one count and one source". Information must not be collected beyond the scope, only the minimum and sufficient relevant information required to meet service and management tasks, that is, "least sufficient".

The third is to meet business application and management requirements. The responsible unit shall, according to the actual needs of service and management, collect the population health information to meet the requirements of business work, and achieve intra-regional interconnection, information sharing and business collaboration.

Management requirements for population health information

The first is the competent authority. The administrative departments of health and family planning at and above the county level (including the administrative department of traditional Chinese medicine) are the competent departments of population health information and are responsible for advancing, guiding, and supervising the management of population health information in the region.

The second is storage management requirements. In accordance with the overall plan for the construction of three major databases of population health information (full population database, electronic health file database, electronic medical record database) and four-level platforms (national, provincial, prefecture-level, county-level), the implementation of population health information Hierarchical storage. Responsible units are responsible for storing management services and related population health information generated during the work, and should have data storage, disaster recovery backup and management conditions that meet the requirements of relevant national standards, establish a reliable population health information disaster recovery backup working mechanism, and conduct it regularly Backup and recovery testing to ensure that data can be restored in a timely, complete, and accurate manner, and to achieve long-term preservation and historical data archival preservation management. Institutions of all levels and types may not store population health information on overseas servers, and may not host or lease overseas servers.

The third is the update and maintenance requirements. The responsible unit shall establish and improve the management system, clarify the responsibilities of the population health information management department and position, and update and maintain the population health information in a timely manner in accordance with the needs of service and management to ensure that the information is in the latest, continuous, and effective state.

The fourth is entrusted management requirements. If the responsible unit really needs to entrust other institutions to store, operate and maintain population health information, it should strictly follow relevant national laws and standards, ensure that the entrusted unit has the corresponding qualifications and conditions, and still be entrusted in accordance with the principle of "who is entrusted and who is responsible" The unit is responsible for the management and security of population health information. The entrusted storage, operation and maintenance institution shall strictly perform technical support for population health information management in strict accordance with the entrusted agreement, and it is forbidden to collect, develop and use population health information beyond its authority.

Fifth, change management requirements. When the responsible unit changes, the managed population health information shall be completely and safely transferred to the competent department or the institution that undertakes its functions, and shall not cause the destruction or loss of the population health information.

How to use population health information

The purpose of using population health information should be to improve the level of medical research, scientific decision-making and convenience services, and ultimately serve the health of the people.

The first is classified utilization. According to the population health informatization construction plan, gradually realize the interconnection and sharing of population health information, and serve the various population health services and management in the region. Information such as population health information statistical yearbooks that should be disclosed to the society in accordance with law should be proactively disclosed in a timely manner. Don't provide external information related to confidential information and personal privacy.

The second is authorized use. The responsible unit shall establish a system for comprehensive utilization of population health information and authorize the use of relevant population health information. Relevant units or individuals should use the data related to population health information to submit a written application to the responsible unit. Both parties should sign a data utilization agreement, clarify the way, content and purpose of using the data, and clarify the responsibility of the unit or individual. The utilization unit or individual shall not use or publish population health information beyond the scope of authorization, shall not provide the obtained population health information to others without authorization, and shall not be used for purposes that endanger the rights and interests of citizens, social order and national security.

Third, individuals use their own population health information. The responsible unit shall provide the query and copy services of the population health case information, and provide secure information query and copy channels to ensure that personal privacy information is not leaked without authorization.

Requirements for ensuring information security and protecting privacy

The first is to strengthen information security. It is necessary to establish an information security guarantee system, formulate and improve security management systems, operating procedures and technical specifications in accordance with information security level protection requirements to ensure the security of population health information systems. In the process of collecting, managing, and utilizing population health information, we must implement privacy protection requirements, ensure the security of population health information, and not disclose private information.

The second is to establish a trace management system. Any user who establishes, modifies, and accesses population health information should pass strict real-name identification and authorization control so that his behavior is manageable, controllable, and traceable.

The third is to implement information security review requirements. In accordance with the requirements of the relevant national information security review system, strengthen the security management of information technology products and information technology service providers of population health information systems to ensure security and controllability.

Nine, related responsibilities

The first is to strengthen guidance and supervision. The administrative departments of health and family planning at all levels shall supervise and inspect the management of the population health information of the responsible units in their respective administrative regions, guide and supervise the utilization of the population health information, and gradually improve the refined population health service and management capabilities in their respective administrative regions.

The second is to establish a notification system. Relevant units and individuals shall, in the process of using population health information, constructing and maintaining population health information systems, and providing technical support, violate the provisions of these Measures and cause adverse consequences such as data loss, destruction, and privacy disclosure, the competent authority or responsible unit shall notify them ; If the circumstances are serious and violate national laws and regulations, the legal responsibility shall be investigated.

The third is to establish a system of accountability. For the competent authorities and responsible units that violate the provisions of these measures, the superior competent authorities shall supervise and rectify, report criticisms, and propose suggestions for administrative sanctions according to the seriousness of the circumstances; if a crime is constituted, criminal responsibility shall be investigated according to law. ^[3]