Data protection among health insurers largely guaranteed

A survey conducted by the Federal Data Protection and Information Commissioner (FDPIC) and Federal Office of Public Health (FOPH) ...
 

has shown that health insurers providing mandatory insurance for medical treatment and optional daily allowance insurance under health insurance legislation largely meet data protection requirements. However, there is scope for improvement in a number of sensitive areas.
Within the framework of a working party, the FDPIC and FOPH, in their capacity as supervisory authorities, issued a detailed questionnaire to all health insurers in December 2007. The document covered organisational requirements imposed by legislation governing data protection and data protection management. The majority of insurers completed and returned the questionnaire within the time limit set.

The findings were analysed and are now available in the form of a report. This report constitutes a valuable basis on which to take action to remedy a number of deficiencies highlighted by the survey and optimise data protection.

The findings of the survey indicate a need for action in the following areas: economic efficiency controls, medical officer services, case management and outsourcing.

In addition, some insurers have failed to set up a data protection strategy or define data-handling regulations. While the majority have designated employees to be responsible for data protection – the majority of whom have received appropriate training – others, in breach of legal requirements, have not yet appointed a manager or registered data files with the Commissioner.

The two supervisory authorities were pleased to find that a majority of insurers have declared a readiness to submit to a regular data protection audit.

This demonstrates heightened awareness of the issue and creates an important confidence base, particularly in   light of the proposed introduction of computerised patient files. The FOPH and FDPIC are confident that these statements of intent will be rapidly translated into practice and that they will be kept informed of the measures taken by insurers.

Summaries of forthcoming measures to be implemented by the FOPH and FDPIC can be downloaded at the following addresses:

www.bag.admin.ch/themen/krankenversicherung/06368/index.html

www.edoeb.admin.ch/aktuell/index.html