The healthcare industry is plagued by a myriad of cybersecurity-related issues posing new challenges in the Healthcare Sector. In an increasingly data-driven world, cyber security is no longer just a concern for experts. During the last 24 months, Europe came across an unprecedented number of cyber-attacks in terms of their global scale, impact on business sector and rate of spread. Characteristically, the May’s 2017 attack in England’s National Health Service (NHS) demonstrated in the most flashing way the vulnerabilities of information systems (IS) in any possible way. Healthcare organizations are some of the most-trusted entities holding the most sensitive information about patients: name, date and place of birth, medical records, social security details. Suffering from many flaws (low budget, lack of IT organization, excessive use of legacy systems), healthcare actors have become easy targets for hackers, facing more and more pressure and threats from them. The nature of the healthcare industry’s mission poses unique challenges since cyber-attacks can have ramifications beyond financial loss and breach of privacy.The General Data Protection Regulation (GDPR) 2016/679 which will be directly applicable in all member states by 25 May 2018 requires for healthcare organizations to re-think about their data flows and how they handle and monitor patient data to make sure they are in compliance with the regulation. At the same time, the expected massive growth of data protection jobs redrives new skills, knowledge and competences from Healthcare employees. As a result, Healthcare Sector is facing the risk of rising skills mismatch between data protection officers/employees across European countries with different occupational profile on skills and competences and most importantly, different level of legislation/integration on data protection. Our proposed Project aims at empowering the major actors with employees that are going to fill the gap and the identified skills mismatch through: •Developing enhanced regional and cross-regional partnerships to ensure that a sufficient number of healthcare employees and learners receive the right training / education based on current needs •Connecting educational and vocational training with healthcare industry and organisations in a more systematic and coherent way •Developing an environment that is going to foster employability of employees in the healthcare sector, providing adequate tools that will better their working conditions and the quality of services provided •Improving comparability and transfer of skills and competences focusing on-line training of current healthcare employees based on a blended approach, while introducing innovative education/ training initiatives •Raising awareness and improving the knowledge on patients’ data privacy protection as well as providing concrete information on rising legal aspects Concise description of the results and/or products expected: -A renewed Occupational Profile for DPOs accompanied by a new Skills Chart -A DPO VET Curriculum accompanied by a Peer Mentoring Scheme -An Awareness raising Curriculum on Data Protection for current and future employees -Data Protection and GDPR Learning Resources for learners and wider audiences -On line Peer Mentoring Toolbox -Development of effective feedback loops to enhance peer mentoring Our partnership has formed a coherent strategy to reach: •Stakeholders: Health associations, health/pharmaceutical industry, VET providers, independent data protection authorities Chamber Unions •End users: DPOs, Information security experts, lawyers of Bars Associations, current and future employees in the Healthcare sector, learners & trainers making use of the learning and training resources developed The impact envisaged: SecureHealth is going to achieve an important Social and Financial Impact, specifically: 1.For Stakeholders: •Strengthened interoperability network across employers and employees •Employers and social partners will maintain an important role in shaping DPOs VET provision •Industry-ready workforce meeting labour market needs •Increased confidence and mutual trust for Data Protection •Increased visibility of outputs through open multifarious dissemination channels 2.End users: current and future employees in Data Protection: •Better employability chances •Transparent joint qualifications and trasferrable skills through a viable Certification Scheme •Enhanced competitiveness for the data protection field •Exchange of good practices through trans-regional mobility and advanced peer mentoring schemes •Harmonised but not homogenised learning-outcome based and teaching approach across the five countries Finally, it must be underlined that within the project, special focus will be given in the management and accessibility of personal data in the context of outbreaks (such as the current COVID19 pandemics), following the European Data Protection Board's statement in March 2020.
- Foster employability of young learners and employees in the health sector, providing them with the new Data Protection (DP) Skills Sets, achieving higher connectivity between the emergence of new job roles and associated skills needs from 2016/679 Directive. - Enhance transparency, comparability and harmonization of Sectoral skills and qualifications of DP employees, providing a new Occupational Profile that includes new “soft skills” needed in the data privacy area. - Support setting-up of two new VET Curricula: preparation of a learning-outcome based Training course for DPOs in Health sector & trainers that are going to cover “horizontally” the main areas of skills and competences and share a common learning experience among them at a EU level and an Awareness raising DPO Curriculum accompanied by a strong Peer Mentoring element to enhance the capacities of in-company trainers within the Healthcare sector. - Develop a new Peer Mentoring Scheme, supported by a Toolbox, that is going to provide the necessary linkage between VET Training and Actual Work and enhance real learning. - Foster cross-border, transnational / interregional mobility for DPO's in the Health sector that leads to knowledge transfer and new job opportunities.
The health sector, which holds some of the most important and sensitive personal data for patients, is quite vulnerable to cyber-attacks as it was shown after an internal investigation conducted before the proposal was written, mainly due to the limited budget and the fact that cyber-security is not a priority for this sector. The consortium recognized that there was a gap in this field and therefore developed a project, which would fill these gaps. Based on the needs expressed by the partners, the key aim of the project was to incorporate the new digital mentality into companies, employees and young learners, while responding to the fragmented certification system in the field. The consortium addressed needs that focus on the consequences of a potential cyber-attack on the health sector. In particular, on the occasion of the GDPR 2016/679 which requires for healthcare organizations to re-think about their data flows and how they handle and monitor patient data, emerged the need to face the issue of rising skills mismatch between data protection officers/employees across EU countries with different occupational profile on skills and competences and most importantly, different level of legislation/integration on data protection.