Oasys Data Protection Overview

1. Oasys Data Protection Overview Oasys on local computer Oasys internet database • Oasys saves all personal details on the users computer • Oasys saves all anonymous details to a central server on the internet

2. Saving Spirometry Records Oasys on local computer Oasys internet database Anonymous data saved on internet database Personal details saved locally • Spirometry • Causative Agents • Treatment, etc • View Example Spirometry Record • Name • Patient ID • DOB, etc

3. Opening Spirometry Records Oasys on local computer Oasys internet database Local details used to search by patient name etc. Request for specific record Internet database returns anonymous data Oasys combines anonymous data with personal details

4. Personal Details File (on your computer) • The file can be passed to collaborators • Many users can share a file on a network • This file is very important • Oasys can backup this file on the internet database for you. • How does this not break patient confidentiality? • View example personal details file

5. Backup Personal Details Oasys on local computer Oasys internet database You provide a passphrase to encrypt the data The details are encrypted on your computer before being sent on the internet The internet database saves the encrypted data

6. Restore Personal Details Oasys on local computer Oasys internet database The internet database returns the encrypted data You provide a passphrase to decrypt the data The personal details are restored if the decryption is successful.

7. Encrypting the Personal Details • Uses 128 bit Rijndael encyption • As long as no one finds or guesses your encryption phrase, your encrypted data can never be deciphered. • You must supply a phrase that is extremely hard to guess. Remember that a computer can make thousands of guesses every second. • Oasys insists the phrase contain at least one number, one capital and one lower case letter. • View an example encrypted file

8. Clinical / Audit Patient Data • The Oasys Internet Database has the concept of “a patient” • “Patients” are identified by numbers within the database • There is no personally identifiable data for a “patient” in the database • Clinical and audit details are stored for each patient, such as whether they smoke or are atopic • View example clinical / audit file for a patient

9. Opening Anonymous Patient Data Oasys on local computer Oasys internet database Local details used to search by patient name etc. Request for patient “n” (identified by a number) Internet database returns data (all anonymous) for patient “n” Oasys displays for the user

10. Saving Anonymous Patient Data Oasys on local computer Oasys internet database Request to save patient “n” Internet database saves data (all anonymous) for patient “n”