The challenges of the national health identifier (INS)
Interopérabilité | 21 Jun 2010
The aim of the INS is to link a patient's health data to the correct file with complete certainty. A strategic tool, the national health identifier will enable that information to be shared within the framework of the electronic health record (DMP), the pharmaceutical record (DP) and other medical files.
Its implementation is a response to a clearly specified trajectory (see "The national health identifier : a phased implementation")
The legal purpose of setting up the national health identifier was to put a stop to a confusing situation: when patients were allocated an identifier for each healthcare professional or health institution, this gave rise to numerous duplication problems. In other words, some people were allocated more than one INS and, in other cases, the same INS was allocated to more than one person. France's data protection commission (the CNIL) delivered its verdict on the use of a patient's social security number, otherwise known as the national identification number (NIR), in its conclusions of 20 February 2007. It restated several principles before giving its opinion, and started by underlining the specific nature of health data: "This is not personal data like any other: because it is "sensitive", it requires additional protection". The commission was also concerned about the confidentiality of that information: "Even if special protection measures were introduced, the direct use of a number as widespread as the NIR [...] could alter the bond of trust between healthcare professionals and patients, who may wonder about the risks of uncontrolled access to their personal medical files by means of this widely known identifier". The CNIL thus delivered its verdict with the following reminder: "The most suitable method for ensuring that the appropriate guarantees are in place would be to create a new identifier, specifically for health data, generated on the basis of the NIR. This new identifier would be certified by procedures that have already been tested and are recognized and reliable, and are currently used for beneficiaries of health insurance, but would be generated by means of established anonymization techniques. This arbitrary number, which would be created by decree and submitted for the opinion of the CNIL, would be the specific health identifier which could be used throughout the healthcare system".