BSI PD ISO/TR 18638:2017

This document specifies the essential educational components recommended to establish and deliver a privacy education program to support information privacy protection in healthcare organizations. The primary users of this document are those responsible for planning, establishing and delivering healthcare information privacy education to a healthcare organization.

This document provides the components of privacy education within the context of roles and job responsibilities. It is the responsibility of the organization to define and apply privacy protection policies and procedures and, in turn, ensure that all staff in the healthcare organization understands their privacy protection responsibilities.

The scope of this document covers:

1. the concept of information privacy in healthcare;

2. the challenges of protecting information practices in the healthcare organization;

3. the components of a healthcare information privacy education program;

4. basic health information privacy educational content.