Title Page -- Contents -- Introduction -- The Commission's Expectations in Security -- An Overview of SEISMED -- Chapter One: Clinical and Legal Requirements -- Security Of The Electronic Health Care Record - Professional And Ethical Implications -- Recommendations for European Health Data Protection Legislation -- Legal Issues in Medical Informatics: A Bird's Eye View -- The State of the European Union Directive on Data Protection Presented on 11th July 1994 -- The Data Protection Commissioner's Point of View -- DIRECTIVE 95/ /EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of on the protection of individuals with regard to the processing of personal data and on the free movement of such data -- Chapter Two: Actions To Achieve Security -- Risk Analysis in Health Care Establishments -- The SEISMED High Level Security Policy for Health Care -- Security Standards for Medical Information Systems -- How to assure security: CEN standards, Directives, or European Guidelines? -- Chapter Three: Handling Security in Current Systems -- The SEISMED Guidelines for Host Systems Security -- Developing The Security Culture At The SEISMED Reference Centres -- Data Protection And Security Within TANIT -- Open Information Systems and Data Security in Medicine -- Chapter Four: Security in Systems Development -- Guidelines For Secure System Development And Secure Implementation -- Safety and Security of Information Systems -- The EDITH Approach: The Management Of Authorisations And Security In Healthcare Information Systems -- Chapter Five: Communication and Network Security -- Issues of Security and Network Security in Health Care Information Systems -- Security Standards In Telematic Networks For EU Administrations: Lessons Drawn from the ENS Program -- Cryptographic Mechanisms for Health Care IT-Systems