GI statement on cloud storage of health data

The Gesellschaft für Informatik e.V. (GI) has submitted its recommendations regarding the C5 equivalence regulation to the Federal Ministry of Health (BMG). They are intended to help ensure that the protection of health data in cloud storage remains high. The GI points out that health and social data are particularly sensitive and that standards for protecting this data must meet particularly high requirements.

Prof. Dr. Frank Pallas, spokesperson for the Expert Group on Privacy Enhancing Technology (PET), comments: “The C5 equivalence regulation accepts standards such as ISO 27001 as proof of security. These standards are not designed for highly sensitive health and social data. The aim must remain to establish specific and stricter standards.”

Click here for the full article:
Link: GI-Stellungnahme zur Cloud-Speicherung von Gesundheitsdaten: Basisschutz darf nur ein erster Schritt zu strengen Standards sein – Gesellschaft für Informatik e.V.