Balancing eHealth, data protection, and data security

Peter Krause is an established international expert in the healthcare and healthcare technology sector with over 15 years’ experience in managing asset and trade financing. As the Head of Healthcare, Peter is responsible for the development and delivery of customer-specific usage models for healthcare technology investments at CHG-MERIDIAN.

We have seen from our own experience that this is a problem for customers – the topic is complex and has created uncertainty, especially with regard to individual areas. Many customers in the healthcare sector have stepped up the protection of their IT systems against external attacks, but when it comes to end-of-life processes for their IT assets, there is room for improvement. What happens to the data stored in the devices that are being replaced? Output devices such as printers, copiers, and multifunction printers store personal data, and the erasure of all data storage media in these devices is also subject to the strict regulations. That is why we offer certified, GDPR-compliant data erasure for SSD, hybrid, and flash storage media. Our erasure method answers some of the demands of the new regulation and meets the need for a certified data erasure process for output devices, laptops, tablets, smartphones, and other assets.

First, we look at the level of protection required for the individual customer’s data. Is the data to be erased of a general or an internal nature? Does the storage media contain highly sensitive data that should remain confidential? What if the data is top secret?

We work with the customer to select the erasure concept that best meets their requirements. We then provide a seamless process, from the collection of the old assets right through to the erasure of the data. Customers requiring a very high level of protection can select our secure erasure product, which includes rollback using sealed transport with GPS tracking.

We take a holistic approach to optimising our customers’ IT and healthcare technology that combines technical, administrative, and process-related expertise. Sticking with the example of the printer – once it has been decommissioned, it needs to undergo certified data erasure and the new asset must be seamlessly integrated into the existing infrastructure. The new printer has to meet the hospital’s security requirements and its efficiency has to be monitored. The optimisation of internal processes plays an important role when it comes to commissioning. User identification measures, for example, can help to facilitate access control. The old printer is collected by us and its storage media undergo certified erasure at our technology centre. If the asset is remarketed, it can even provide a financial return.

Our holistic customised financial solutions allow us to analyse and optimise the product lifecycle of every asset. Now that healthcare technology and IT are converging more and more, our approach offers considerable advantages when it comes to establishing an efficient, technology infrastructure that is fit for the future. Tailor-made solutions enabling the development of customised business concepts are key to successful technology investment.

Erlangen University Hospital is a current example of how well this approach works. The hospital had requested a proposal for an output printing solution. We successfully presented the customer with a fully integrated solution that met their specific requirements, and are currently integrating it into the customer-specific work processes. Our solution provides transparency of all costs and consumption-based data, enabling the hospital to use its output devices more efficiently.