Risk management
While the digital transformation can advance the quality and efficiency of health and care delivery, it also requires health and care organisations to identify and address any operational, legal and financial considerations and minimise risks and patient safety issues. The collection, use of, and sharing highly sensitive personal data, enabled by digital health technologies needs to be comply with data security and confidentiality regulations and local procedures to minimise risks from data theft, cyberattacks, unauthorised access, and privacy breaches. In order to limit the exposure to these risks, it is fundamental to identify organisational vulnerabilities as well as to establish and implement appropriate mitigation strategies, including workforce training and citizen/ patient awareness raising. This makes strong risk management an integral and obligatory part of organisational and information governance with associated liability and security policies. To support health and care organisations and industry stakeholders in the process, this DHE building block will provide good practice approaches to risk management in the digital transformation of the health and care sectors.