Bis does not ensure the confidentiality of the message. Is this normal ?
Yes it is ! Kmehr-Bis is not responsible for the message management. Kmehr-Bis defines the structure for the exchange of medical information. This includes a facility to specify a list of individuals/departments/organisations that are exclusively allowed to consult a part of the message. It is the responsibility of certified IT systems to ensure that the wishes for confidentiality expressed in the message are effectively implemented. In the same way, the encrypting of the message when transported or stored is an issue for implementing systems that should comply with the recommendations of the working group security.
