論醫療資訊電子化與隱私權之保護──以美國為借鑑

Study in the Electronic Information and Privacy Protection of Medical Information – Refers to the HIPAA of American

本文旨在探討如何兼顧我國醫療資訊電子化及隱私權之保障，由介紹醫療資訊隱私權與電子化之概念發展，併同我國及美國相關隱私規則以及資訊安全規範為主軸展開，以說明資訊隱私對電子病歷發展之重要性，並梳理二者之基本意義內涵，再就所涉及之病人隱私權與敏感性資料等相關議題進行分析，進而探討在大數據概念下之資訊安全及保障隱私的準則與規範，並推導出我國病歷電子化與醫療資訊保護政策上之法制缺失。經由比較我國現行隱私權相關法律規範及美國健康保險可攜性與責任法案（Health Insurance Portability and Accountability Act, HIPAA），提出以下五點結論與建議：一、積極提升資訊保護之層級及進行政策評估及監測；二、個人資料的蒐集應依最小必要使用原則之概念受到適當的限制，更應取得當事人的同意，以避免資料過度蒐集；三、以我國個人資料處理法做為一般共通性原則規範，毋須另訂專法，法規競合時應以後法優於前法原則解釋其應適用之法律較為妥適；四、刑法第316條之醫療行為主體，宜將職業別修正為概括性的醫事人員；五、我國未如同美國設有醫療資訊獨立監督機關，應盡速設立。
希冀藉由本文之探討、分析及建議，在維護公共利益前提之下，能形塑出切合我國醫療資訊電子化對隱私權的法律調和機制，以利朝向兼顧資訊安全與落實保障當事人隱私權的方向永續發展。

The article aims to explore how to take into account the protection of the electronic medical information and privacy in Taiwan by the introduction of Taiwan and American related to privacy rules and information security standards as the main axis to illustrate the importance of information privacy on the development of electronic medical records and combing the two. The meaning of the basic meaning, and then on the patient privacy and sensitive information and other related issues to be analyzed, and then explore the concept of data security in the concept of data protection and privacy guidelines and norms, and deduced the medical records of our electronic and medical information. The legal system of protection policy is missing. Based on the comparison of the current laws and regulations on privacy right in Taiwan and the HIPAA, the following five suggestions are made: First, to actively upgrade the level of information protection and conduct policy assessment and monitoring; Second, the collection of individual resources should be subject to the principle of minimum necessary use of the concept of appropriate restrictions, but should obtain the consent of the parties, in order to avoid excessive data collection; Third, with our personal data processing as a general principle of commonality, no Another set of special law, rules and regulations when the co-operation should be better than the principle of the former law to explain the law should be more appropriate; Fourth, the body of the medical act under Article 316 of the Criminal Law should be amended to occupational not general medical personnel; Taiwan is not as an independent supervisory body for medical information in American and should be established as soon as possible. With the premise of safeguarding the public interest, this article hopes to establish a legal mediation mechanism that meets the electronic right of privacy of medical information in Taiwan through the discussion, analysis and suggestion of this article, in order to facilitate the consideration of information security and the protection of the privacy of the parties The direction of sustainable development.