Informační a organizační bezpečnost ve zdravotnickém zařízení
My thesis deals with difficulties in protection of sensitive information of patients in public health services. Theoretic part defines basic terms connected with data protection and describes data security management. It also circumscribe other relevant terms and general legal issues connected with this topic. Practical part starts with a description of health system in Czech Republic. In the next part there is a detailed description of medical records and it is characterized as a main source of sensitive information. This part interprets the legislation for data protection in medical facilities. Following part offers risk assessment analysis and involves detailed summary of policies practised in the organization. Finally my thesis sums up the results of my analysis and there are offered steps that could lead to degradation of defined risks.