European perspective: How hospitals should be approaching GDPR compliance

Healthcare organizations in the US need to pay attention to the European Union’s General Data Protection Regulation (GDPR) because they could face fines exceeding €20m ($22.6m) if they handle any data of EU residents. GDPR has a higher compliance threshold than HIPAA and defines personal data as anything connected to an identifiable person, such as a photograph or IP address. Two experts from Germany will explain how one EU health system prepared for GDPR at HIMSS19.