Implementation of requirements engineering method on handling patient data

Abstract

A personal data is information which relate to a person or individual who can be identified from those data. These information is an important resource and asset to any organization especially in healthcare system. The healthcare system data has a high level of privacy as it may contain the sensitive data as well, thus, there is a need to have personal data protection in the healthcare system. To ensure there is a personal data protection, an assessment on the personal data security has to be done. This project is adapting a requirements engineering method and addressing the problems related to the personal data security regarding patient records. The requirements engineering follows the contents of the Simple Reuse of Requirements (SIREN). There are a total of five processes in the requirements engineering method for healthcare. The requirements listed through the requirements engineering process are obtained through the personal data activities such as collection, use, disclosure, security and retention of personal data. The sources in Malaysia healthcare system includes the laws and standards enacted which are confidentiality guidelines and Personal Data Protection Act in Malaysia are followed. The survey conducted in Klang hospital showed that almost all requirements are followed, thus, it can be concluded that confidentiality of patient data in Klang hospital are assured.