PD ISO/TR 18638:2017 - Page 2

Health informatics. Guidance on health information privacy education in healthcare organizations. | Status: Current

1 Scope This document specifies the essential educational components recommended to establish and deliver a privacyeducation program to support information privacy protection in healthcare organizations. The primary users of this document are those responsible for planning, establishing and delivering healthcareinformation privacyeducation to a healthcare organization. This document provides the components of privacyeducation within the context of roles and job responsibilities. It is the responsibility of the organization to define and apply privacy protection policies and procedures and, in turn, ensure that all staff in the healthcare organization understands their privacy protection responsibilities. The scope of this document covers:

1. a) the concept of information privacy in healthcare;
2. b) the challenges of protecting information practices in the healthcare organization;
3. c) the components of a healthcareinformation privacyeducation program;
4. d) basic health information privacy educational content.