Utjecaj Uredbe (EU) 2016/679 Europskog parlamenta i Vijeća Europske unije na upravljanje i zaštitu osobnih podataka u zdravstvenom sustavu Republike Hrvatske

professional thesis

• Author: Petra Nola Fuchs
• Mentor: Stjepan Orešković (mentor)
• Granter: University of Zagreb; School of Medicine; Zagreb
• Defense date and country: 2022-09-16, Croatia
• Scientific / art field, discipline and subdiscipline: BIOMEDICINE AND HEALTHCARE; Public Health and Health Care; Public Health

Abstract

Uredba (EU) 2016/679 Europskog parlamenta i vijeća predstavlja velik iskorak u području zaštite osobnih podatka i informacijske sigurnosti jer je nastala kao rezultat nedovoljno učinkovitog prethodnog nacionalnog zakonodavstva u području uređenja virtualnog okruženja i zaštite prava građana EU u pogledu obrade njihovih osobnih podataka. Razvoj ljudskih djelatnosti u digitalnom svijetu povlači za sobom ubrzani razvoj informacijskih i komunikacijskih tehnologija, a istodobno stvara nove izazove i ugroze privatnosti i zaštite osobnih podataka. Obrada podataka, osobito obrada posebnih kategorija osobnih podataka poput zdravstvenih podataka, novi IT alati i digitalno tržište, razvilo je potrebu za povećanjem zaštite privatnosti novih digitalnih proizvoda i usluga pomoću kojih se ove kategorije osobnih podataka obrađuju te se uvođenje Uredbe u obaveznu praksu smatra opravdanim.
Uredba bi trebala osigurati ujednačeno postupanje u procesu obrade osobnih podataka. Posebne kategorije osobnih podataka dodatno su određene i opisane. Preciznije su opisane postojeće osjetljive kategorije osobnih podataka u zdravstvenoj djelatnosti čime su ojačana prava ispitanika kao i obaveze voditelja zbirki osobnih podataka prema inspekcijskim nadzorima. Na taj način Opća uredba o zaštiti podataka postaje jedinstven skup pravila koji se temelji na zajedničkom pristupu EU-a zaštiti osobnih podataka te se izravno primjenjuje u svim državama članicama.
Uredba dodatno postrožuje i aktivnosti prilikom obrade posebnih kategorija podataka u području “e-zdravstva“ te su problemi s kojima se praktičari svakodnevno susreću tijekom primjene zahtjeva Uredbe u svakodnevnom radu bili glavni motivatori za pisanje ovog rada. Glavni cilj koji se želi postići je ukazati na važnost podizanja svijesti o zaštiti posebnih kategorija osobnih podataka, zdravstvenih podataka, te podizanja organizacijskih i tehničkih mjera zaštite osobnih podatka na višu razinu kao i problemi koji proizlaze kroz uspostavu organizacijskih i tehničkih mjera.

Abstract (english)

Regulation (EU) 2016/679 of the European Parliament and of the Council represents a major step forward in the field of personal data protection and information security as it arose as a result of insufficiently effective previous national legislation in the field of virtual environment and protection of EU citizens' rights. The development of human activities in the digital world entails the accelerated development of information and communication technologies, while at the same time creating new challenges and threats to privacy and personal data protection. Data processing, in particular the processing of specific categories of personal data such as health data, new IT tools and the digital market, has developed a need to increase the protection of privacy of new digital products and services that process these categories of personal dana as justified.
The GDPR should ensure uniform treatment in the process of personal data processing. Special categories of personal data are additionally specified and defined. The existing sensitive categories of personal data in the healthcare sector are described in more detail, which strengthens the rights of subjects as well as the obligations of personal data collection managers towards inspections. In this way, the General Data Protection Regulation becomes a single set of rules based on a common EU approach to personal data protection and directly applicable in all Member States.
The Regulation further tightens the activities for processing special categories of data in the field of "e-health" and the problems that practitioners encounter during the application of the Regulation in everyday work were the main motivators for writing this paper. , and the goal was to show positive and negative effects of this Regulation in everyday health system practice.
The main goal was to point out the importance of raising awareness about the protection of special categories of personal data, health data, and raising organizational and technical measures for personal data protection to a higher level as well as problems arising from the establishment of organizational and technical measures.

• Keywords: Uredba; pojmovi Uredbe; prednosti i nedostaci Uredbe; pozitivni i negativni učinci implementacije Uredbe; zdravstveni sustav
• Keywords (english): The General Data Protection Regulation; Regulation terms; advantages and disadvantages of the Regulation; positive and negative effects the Regulation; health care system
• Language: croatian
• URN:NBN: urn:nbn:hr:105:368574
• Study programme: Title: Leadership and management of health services; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: sveučilišni/a magistar/magistra menadžmenta u zdravstvu (sveučilišni/a magistar/magistra menadžmenta u zdravstvu)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2024-04-05 12:30:38