DIN EN ISO 22600-1:2015-02

This multi-part International Standard defines principles and specifies services needed for managing privileges and access control to data and functions. It focuses on the communication and use of health related information distributed across policy domain boundaries. This includes healthcare information sharing across unaffiliated providers of healthcare and healthcare organizations, health insurance companies, their patients, staff members, and trading partners by both individuals and application systems ranging from a local situation to a regional or even national situation. It specifies the necessary component-based concepts and is intended to support their technical implementation. It does not specify the use of these concepts in particular clinical process pathways. This part of ISO 22600 proposes a text template for the presentation of the policy agreement. This enables the comparable documentation of all parties involved in the information exchange. This part of ISO 22600 contains neither platform-specific nor implementation details. It does not define technical communicative security services and protocols that are already defined in other International Standards. It also does not contain any authentication procedures. This standard contains the German translation of ISO 22600-3:2014 which has been prepared by Technical Committee CEN/TC 251 "Medical Informatics", the secretariat of which is held by NEN (the Netherlands) in collaboration with Technical Committee ISO/TC 215 "Health Informatics" with the participation of German experts. The responsible body at the national level is DIN Standards Committee Medicine, Working Committee NA 063-07-04 AA "Sicherheit" ("Security").