News for hackers. Stuff that matters.
Re:Ask HN: What do you use for authentication and authorizat... by noir_lord on Friday December 28, 2018 @06:14AM (#18776146)
I'm in the UK and our rules are different, we don't have anything directly equivalent to HIPAA (I suspect because we don't currently have the huge number of private hospitals/doctors the US has) in fact even finding out the exact standards you'd have to comply with for the UK is a challenge.

GDPR is good in that regard as the standards are high and apply to more than just electronic storage/interchange.

Re:Ask HN: What do you use for authentication and authorizat... by DanBC on Friday December 28, 2018 @06:32AM (#18776188)
People have to follow the Data Protection Act.

Are these useful?

Here's the Code of Practice for NHS organisations and staff: https://www.gov.uk/government/publications/confidentiality-n...

Here's the other code of practice for everyone working with NHS data: https://digital.nhs.uk/data-and-information/looking-after-in...

And here's the guidance about when to share if it's needed: https://digital.nhs.uk/data-and-information/looking-after-in...