This autumn, the Health and Youth Care Inspectorate (IGJ) is investigating how fifty randomly selected GP practices have organised their information security. According to the report, all GP practices must comply with NEN 7510, the standard for information security in healthcare.
The selected practices have been approached to complete a digital questionnaire. Based on this, they will receive a letter outlining the current situation and providing advice on improving security. According to the IGJ, the inspectorate wants the investigation to provide insight into information security at small healthcare providers and help them strengthen it.
The investigation was prompted by earlier results from out-of-hours GP care. These showed that 43 of the 49 organisations investigated did not comply, or did not fully comply, with the mandatory standard. The IGJ reports that the experience gained from that investigation will be taken into account in the approach to the new investigation.