Après une présentation de GE Healthcare, l'auteur fait la balance entre la pression réglementaire et l'analyse du risque.

1. Page 1
GE Healthcare – Privacy and
Security
Claude Champagne
EU Privacy program manager
GE Healthcare
September 23th, 2015
Integrating
data protection
at every step

2. Page 2
1989 McGill - Montréal
2012 ESC Toulouse
GE Healthcare for 8 years
3 years as Privacy
manager
https://fr.linkedin.com/pub/claude-
champagne/7/713/338
Claude Champagne

3. Page 3
General Electric & GE Healthcare
• Founded by Edison in 1878
• 300 000 employees
• 175 countries
• $150 billion revenue
• “At work for a healthier world …”
• 53,000 employees
• $18 billion revenue
• $1 billion/year investment in
R&D
Hardware Software Wetware

4. Page 4
GE Healthcare Context
Services
Monitoring
Analytics
Europe & Global
Engineering Services Marketing IT

5. Page 5
Data Privacy : who is really
pushing?
Operational Pressures
Regulatory Pressures
Security & Privacy
Policy
Mandatory filings
ISMaturity
Operational support
Governance
contract
IT Interconnect
Risk analysis
Security measures
Privacy approach

6. Page 6
External triggers drive changes
Operational Pressures
Regulatory Pressures
Territorial regrouping
“Loi Touraine”
EU Data Protection
Telemedicine, ambulatory,
prescription medication mgmt..
IT / Business functional review
 Processes -> data inventory -
> infrastructures
 Contracts
IT (r)evolution
 CIO/DPO
 governance
 Privacy & Security are
integral parts but not primary
trigger. Unless..

7. Page 7
The effective risk
UK – Data breaches per sector
(source ICO)
USA – Data breach Healthcare 2015
(source Ponemon-ID experts)
Criminal acts rank #1
91% at least 1 incident
$2,1M avg per incident
Globally – Data breaches 2015
(source Ponemon-IBM)
Probability: France 1st rank
Healthcare: most costly
Impact: France 1st rank
Impact: HealthC. 1st rank
No published metrics
found in France

8. Thank You
GE Healthcare Proprietary and Confidential Information