Medicine working group

Medicine working group

Around 30 internal and external data protection officers from hospitals, laboratories, doctors’ surgeries and other medical facilities or organizations currently work in the Medical Working Group on issues relating to medical data protection. Face-to-face meetings are usually held twice a year at various locations in Germany; these are occasionally supplemented by virtual meetings.

The working group is based on trusting cooperation. The exchange of experience and best practices is of great importance and promotes an open exchange within the working group. All participants benefit from active and regular collaboration. The participants in the working group draw up joint internal work aids and statements, provide guidance, for example on hospital information systems, and discuss with experts and supervisory authorities, among other things, the requirements of order processing, requests for patient information and protected communication in the treatment chain for mutual support.

We welcome new members who find medical data protection very exciting.
In addition to general professional experience as a DPO, we require a basic understanding of medical data protection. In particular, you should be familiar with the special laws in the healthcare sector. You are familiar with the professional secrecy mentioned in the GDPR, which often remains “untouched”, as a professional duty of confidentiality that must also be observed. You are not only familiar with the processes in a hospital or doctor’s surgery from your own experience as a patient, but have also already taken at least a brief look behind the scenes as a DPO.

BvD members who work in the medical field, for example in healthcare, insurance, benefit assessment or with manufacturers of medical devices and medical software systems, and who generally have experience in the field of data protection in the medical environment, can also become active in the Medical Working Group.

You can find existing documents from the AK Medizin in the side column under Links and Downloads.

Sample AV contract for the healthcare sector: (revision planned)

This model contract was developed together with the DKG and other associations (GMDS, GDD, bvitg) for the special requirements of the healthcare sector. In the meantime, it has gained a very high level of acceptance here.
Please note: Since the last version in 2018, nothing has changed in the GDPR itself, but some other laws (e.g. TKG, TMG, TDDSG, UWG, GeschGehG) to which the model contract also refers. Therefore, some passages must be adapted to the current legal status and case law when selecting the respective options and passages. It is also possible to add your own necessary passages, e.g. a provision on BYOD or mobile working, to the model agreement.

Practical help on the requirements for a data protection cockpit:
Particularly in the case of sensitive health data, it is essential that data controllers and, in particular, their data protection officers maintain a comprehensive (or: holistic) overview of the processing of health data. This practical guide contains the most important requirements for a data protection cockpit and was developed by members of the three associations GMDS, GDD and BvD.

Meetings
The AK Medizin meets twice a year for a two-day face-to-face meeting. In between, online meetings are held as required.

Interested parties can contact the office or the head of the working group.

Contact
Barbara Stöferle (Spokesperson AK Medicine)
Jan Alkemade (Deputy Spokesperson of the Medical Working Group)
Nadja Köhler (deputy spokesperson of the Medical Working Group)

Dates for the meetings can be found in the calendar.

Links and Downloads (16)