GDPR requires, among other technical- and organizational measures, appropriate safeguards to protect personal data. These changes you will certainly notice as a user when you log in to SITS Registry the next time: data minimization, two-factor authentication and an updated Terms and Conditions.
Data minimization, personal data registered in SITS Registry regarding both users and patients must be adequate, relevant and limited to what is necessary in relation to the purposes for which the data is processed. In order to comply with GDPR and implementation of acceptable safeguards, we will remove some data points unnecessary for data processing. These include, but are not limited to: Patient Initials and Date of Birth. Up until yesterday, these parameters were merely used to simplify/shorten the process of connecting a SITS treatment file to the local patient file at the hospital. Instead, we suggest SITS users to register the SITS treatment file number (TFN) in the internal patient files, and create a safely stored local record with the SITS TFN and patient identification, to be used for identification of patients in the SITS Registry and source data verification, if needed.
Two-factor authentication (2-FA) verifies SITS users’ identity by using a second factor, e.g. SMS or e-mail, containing a unique number entered at login. This method will confirm the user’s (claimed) identity by matching information about the registered user with the person accessing the database (by utilizing their chosen password in combination with the unique number sent by SMS/e-mail). Furthermore, 2-FA will function as a verification of users’ contact information is kept up to date, as well as removal of the option of multiple users to access the same account, which is a violation of our Terms and Conditions. Next time you log in to SITS Registry you will be requested to set up 2-FA with either SMS or e-mail. It is possible to set up both options, e.g. if you want to alternate between the two login options when your mobile is not around, then you select and log in using the e-mail option instead. To enable a second login option, please go to “Personal Preferences” menu and activate it when you have logged in to SITS Registry.
Updated Terms and Conditions, to use SITS Registry a SITS user must accept the updated Terms and Conditions. The Terms and Conditions entails, for example, information regarding user data in the SITS Registry (name, e-mail, phone number, etc.), in addition to user rights, responsibilities, restrictions, and the right to be forgotten and removed from the system. It will also specify the limitation of our liabilities as well as the requirement to read our policies (especially Privacy policy). Perhaps you have already accepted the updated Terms and Conditions that came into force today, otherwise you will be requested to accept it next time you log in to SITS Registry.