Difference between revisions of "Minutes - Security WG 2024-11-20"

From Health Level 7 Belgium Wiki
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
===== Attendees =====  
 
===== Attendees =====  
 
* Bart Decuypere
 
* Bart Decuypere
* Brecht Van Vooren
+
* Benny Verhamme
* Didier Témans
+
* Brian Thieren
* Elien De Koker
+
* Dominiek Leclerq
* Jan Lenie
+
* Erwin Bellon
* Jean-Michel Polfliet
 
 
* Karlien Erauw
 
* Karlien Erauw
 +
* Maxime Caucheteur
 
* Nick Hermans
 
* Nick Hermans
* Philippe Baise
 
 
* Virginie Hayot
 
* Virginie Hayot
  
Line 15: Line 14:
 
* Anthony Maton
 
* Anthony Maton
 
* Arne Van Eycken
 
* Arne Van Eycken
* Benny Verhamme
+
* Brecht Van Vooren
* Brian Thieren
+
* Didier Témans
 +
* Elien De Koker
 +
* Jan Lenie
 +
* Jean-Michel Polfliet
 
* Cyprien Janssens
 
* Cyprien Janssens
 
* Didier Temans
 
* Didier Temans
* Dominiek Leclerq
 
* Erwin Bellon
 
 
* Félix De Tavernier  
 
* Félix De Tavernier  
 
* Filip Veldeman
 
* Filip Veldeman
Line 30: Line 30:
 
* José Costa Teixeira  
 
* José Costa Teixeira  
 
* Marco Busschots
 
* Marco Busschots
* Maxime Caucheteur
 
 
* Nico Vannieuwenhuyze
 
* Nico Vannieuwenhuyze
 +
* Philippe Baise
 
* Stef Hoofd
 
* Stef Hoofd
 
* Steven Van den Berghe
 
* Steven Van den Berghe
Line 39: Line 39:
  
 
===== Minutes =====
 
===== Minutes =====
* https://github.com/hl7-be/infsec/issues/23  
+
* We look into issue 23 raised by UZ Leuven: https://github.com/hl7-be/infsec/issues/23  
 
+
::* most important aspect of this issue is that aspects of pseudonymization is difficult to implement
 
+
::::* every field that has a text field needs to be pseudonymized, it is up to the implementer to decide which field has to be pseudonymized
* We discuss the following issues
+
::::* it is a consequence of the decision to not impact the profiles structure
::* Looking into [https://github.com/hl7-be/infsec/issues/16 issue 16]: How does pseudonymisation work with search?
+
::::* how can we resolve this: add some clarifications in the guidance
::::* guidance clarifies this: "Searching on a pseudonymised field will be done using the normal search parameter. The fact that this search parameter contains a pseudonym will be indicated by a urn-style prefix. The pseudonym will be represented by the same way as described in item 2. “urn:be:fgov:pseudo-encrypted:” fields cannot be used in a search, if the search parameters are not available as a resource.", [https://build.fhir.org/ig/hl7-be/infsec/branches/releasecandidate/guidance.html see here in 2.1.2]
+
::::::* can it be an idea for cookbooks to have guidance on which fields to be pseudonymized
 
+
::::::* guidance of the master profile needs clarified
::* Looking into [https://github.com/hl7-be/infsec/issues/16 issue 16]: no different slicing will be used, pseudo will not have an impact, [https://build.fhir.org/ig/hl7-be/infsec/branches/releasecandidate/guidance.html see here 2.1.1 in guidance]
+
::* guidance will be put together, once done the WG members will be notified by email
::::* RSW is using the INAH pseudonymization, so ability to indicate the type of pseudonymization is necessary
+
::::* anyone can introduce any comment in github on this, we will follow up and organise a WG meeting if issues arise
::::* this ability exists, see pseudonymization extension
 
::::* a scheme will need to be added, this can be done through creating an issue ; this will not be done immediately
 
  
 
===== Next agenda meeting agenda points =====
 
===== Next agenda meeting agenda points =====

Latest revision as of 11:14, 20 November 2024

Attendees
  • Bart Decuypere
  • Benny Verhamme
  • Brian Thieren
  • Dominiek Leclerq
  • Erwin Bellon
  • Karlien Erauw
  • Maxime Caucheteur
  • Nick Hermans
  • Virginie Hayot
Excused/Not present
  • Annabel Dompas
  • Anthony Maton
  • Arne Van Eycken
  • Brecht Van Vooren
  • Didier Témans
  • Elien De Koker
  • Jan Lenie
  • Jean-Michel Polfliet
  • Cyprien Janssens
  • Didier Temans
  • Félix De Tavernier
  • Filip Veldeman
  • Filoretta Velica
  • Hanne Vuegen
  • Isabelle Pollet
  • Jan Lenie
  • Jan Stinissen
  • José Costa Teixeira
  • Marco Busschots
  • Nico Vannieuwenhuyze
  • Philippe Baise
  • Stef Hoofd
  • Steven Van den Berghe
Agenda
  • Resolve new issue 23
Minutes
  • most important aspect of this issue is that aspects of pseudonymization is difficult to implement
  • every field that has a text field needs to be pseudonymized, it is up to the implementer to decide which field has to be pseudonymized
  • it is a consequence of the decision to not impact the profiles structure
  • how can we resolve this: add some clarifications in the guidance
  • can it be an idea for cookbooks to have guidance on which fields to be pseudonymized
  • guidance of the master profile needs clarified
  • guidance will be put together, once done the WG members will be notified by email
  • anyone can introduce any comment in github on this, we will follow up and organise a WG meeting if issues arise
Next agenda meeting agenda points
  • only if new issues arise
Next meetings
  • TBC