Any future state legislation is unlikely to make the Standard obsolete, because it is unlikely to address more than the Commonwealth Act. No other country has a similar standard. Data protection or privacy legislation in other countries does not address the management or technical levels of the Australian Standard. It will be interesting to see how the standard is implemented in practice over the coming years, and whether other countries parallel its implementation. Information security and privacy Information security is still an important part of a total privacy protection solution, as well as being important in its own right.
Information security is dependent on human and technical factors.
To address the human issues is no more difficult than any other management challenge. It requires understanding of the issues, commitment to a solution, and sound implementation. Education is a key component. An acceptable technical solution to information security in the health care setting is our holy grail. We know that information security is best designed into an information system from the outset.