Ensuring Confidentiality and Privacy of Patients as Essential Components of an Electronic Health System

In ۲۰۲۲, the chairman of the Environment and Labor Health Office of the Iranian Ministry of Health, wrote to ۱۹ selected universities of medical sciences, mandating Labor Medicine specialists to open files for the health of workers who seek their services in compliance with Article ۹۲ of Iranian labor law. They were instructed to record all health information of the workers, regardless of its relevance to their profession, without obtaining informed consent. It appears that this order is supported by Sections ۱۸, ۲۰, ۲۱, ۲۲, ۲۳, and ۲۴ of the ۲۰۱۳ occupational health examinations directive and its accompanying guideline, which was enacted a year later.The implementation of electronic health records is not inherently illegal or unethical. The absence of informed consent and the unnecessary disclosure of health information contradict privacy and confidentiality requirements. Disclosure of workers' information without legal permission violates a physician's obligation to uphold patient confidentiality. Article ۶۴۸ of the Iranian penal code criminalizes any disclosure unless it is authorized by law. It is evident that governmental regulations do not possess sufficient legal authority to contradict acts of parliament. Therefore, referencing legal and ethical principles is essential.The electronic health system is a significant aspect of developing the healthcare system and enhancing the quality of life for Iranian citizens. However, it should not grant permission to compromise patients' privacy and confidentiality rights, including those of workers. Disclosure of all workers' medical information, as prescribed in the aforementioned governmental regulations, is neither urgent nor appropriate. Lack of any requirement for patient informed consent is escalating concerns. The healthcare system administration should be mindful of the importance of privacy rights by refraining from accessing unnecessary and unrelated information and ensuring the confidentiality of patients' data, unless mandated by parliamentary regulations.

کلیدواژه ها:

Electronic Health System ، Secrecy ، Privacy ، Confidentiality of Information ، Occupational Disease