Introduction:
We live in an era where securing cases for elective procedures in the private sector is largely dependent on social media advertising. This involves posting success stories with pre and post-operative images of patients. Discretionary steps are often limited to black- out of the eye areas, which is often insufficient to hide the patient’s identity. Moreover, doctors who have had the opportunity to operate on celebrities proudly exhibit their pictures on laptops to potential patients and even in classroom lectures for that extra marketing oomph. Photographic consent forms are unheard of in our country and patients are largely unaware how their data is being used and shared.
In the West, confidentiality is part of patient care, as data breaches can impact the holistic well-being an vulner- ability of the patient. Cybercriminals infiltrating into plastic surgery records usually use them to mutilate the data or for intimidation and extortion. Data protection failure makes the organisation liable to face legal action and compensation.
Storing data in a safe place that is physically disconnected to non-confidential hospital records or creating backups that cannot be edited or altered are some of the solutions being examined to prevent a data violation in developed countries. Other processes including routers, switches and Firewalls are also being scrutinized to examine the data before deciding the appropriate location to store the type of data and block outbound packages containing sensitive information or from computers not permitted to access the hospital internal systems.
Web proxy servers to communicate through private emails of patients are being suggested. Hacked accounts are usually traced back to a security error by the surgeon himself. All surgeons must be aware that data privacy is a core responsibility and part of a core competency of every surgeon and that legal implications are imminent in case of a data leak.
Data protection is a responsibility yet to be recognized and implemented in our country. Plastic surgery is one field where confidentiality is especially important.
No systems exist to protect patient confidentiality, which is an inherent right of the patient. Patient confidentiality in plastic surgery should be part of the plastic surgery curriculum. Serious consequences including loss of trust in the doctor-patient relationship and mental trauma can arise just by a slip of the tongue or revealing an image the patient has not consented to. Photographic consent forms that clearly state how patient data shall be used should be integrated into pre-operative consent forms including for research purposes and unnecessary disclosure without patient consent for personal gains should be discouraged among plastic surgeons.
Reference
1. Soo-Jin Lee S, Borgelt E. Protecting posted genes: social networking and the limits of GINA. Am J Bioeth. 2014;14(11):32-44. doi: 10.1080/15265161.2014.95 7417. PMID: 25325810.
2. Büschel I, Mehdi R, Cammilleri A, Marzouki Y, Elger B. Protecting human health and security in digital Europe: how to deal with the “privacy paradox”? Sci Eng Ethics. 2014 Sep;20(3):639-58. doi: 10.1007/s11948-013 -9511-y. Epub 2014 Jan 21. PMID: 24446151.
3. Kayaalp M. Patient Privacy in the Era of Big Data. Balkan Med J. 2018 Jan 20;35(1):8-17. doi: 10.4274/ balkanmedj.2017.0966. Epub 2017 Sep13. PMID: 28903886; PMCID: PMC5820452.
All published material becomes the sole property of the Pakistan Journal of Plastic Surgery, copyrighted by the Pakistan Association of Plastic Surgeons (PAPS). By submitting an article or brief communication, all authors agree to these conditions.
During the submission process, all authors have required to complete a copyright transfer agreement, “Author Consent form” By completing the copyright transfer agreement, you are transferring copyright of figures, tables, videos, and the content of the manuscript to the Pakistan Association of Plastic Surgeons (PAPS).
If you do not wish to or cannot transfer copyright of some or all of your content, please contact the editorial office at pjpspakistan@gmail.com.