Oasys Data Protection Overview

1
Oasys Data Protection Overview

• Oasys saves all personal details on the users
  computer
• Oasys saves all anonymous details to a central
  server on the internet

2
Saving Spirometry Records
Anonymous data saved on internet database
Personal details saved locally

• Spirometry
• Causative Agents
• Treatment, etc
• View Example Spirometry Record

• Name
• Patient ID
• DOB, etc

3
Opening Spirometry Records
Local details used to search by patient name
etc. Request for specific record
Internet database returns anonymous data
Oasys combines anonymous data with personal
details
4
Personal Details File (on your computer)

• The file can be passed to collaborators
• Many users can share a file on a network
• This file is very important
• Oasys can backup this file on the internet
  database for you.
• How does this not break patient confidentiality?
• View example personal details file

5
Backup Personal Details
You provide a passphrase to encrypt the data The
details are encrypted on your computer before
being sent on the internet
The internet database saves the encrypted data
6
Restore Personal Details
The internet database returns the encrypted data
You provide a passphrase to decrypt the data The
personal details are restored if the decryption
is successful.
7
Encrypting the Personal Details

• Uses 128 bit Rijndael encyption
• As long as no one finds or guesses your
  encryption phrase, your encrypted data can never
  be deciphered.
• You must supply a phrase that is extremely hard
  to guess. Remember that a computer can make
  thousands of guesses every second.
• Oasys insists the phrase contain at least one
  number, one capital and one lower case letter.
• View an example encrypted file

8
Clinical / Audit Patient Data

• The Oasys Internet Database has the concept of a
  patient
• Patients are identified by numbers within the
  database
• There is no personally identifiable data for a
  patient in the database
• Clinical and audit details are stored for each
  patient, such as whether they smoke or are atopic
• View example clinical / audit file for a patient

9
Opening Anonymous Patient Data
Local details used to search by patient name
etc. Request for patient n (identified by a
number)
Internet database returns data (all anonymous)
for patient n
Oasys displays for the user
10
Saving Anonymous Patient Data
Request to save patient n
Internet database saves data (all anonymous) for
patient n