Web Vulnerability Study of Online Pharmacy Sites

Consumers are increasingly using online pharmacies, but these sites may not provide an adequate level of security with the consumers’ personal data. There is a gap in this research addressing the problems of security vulnerabilities in this industry. The objective is to identify the level of web application security vulnerabilities in online pharmacies and the common types of flaws, thus expanding on prior studies. Technical, managerial and legal recommendations on how to mitigate security issues are presented. The proposed four-step method first consists of choosing an online testing tool. The next steps involve choosing a list of 60 online pharmacy sites to test, and then running the software analysis to compile a list of flaws. Finally, an in-depth analysis is performed on the types of web application vulnerabilities. The majority of sites had serious vulnerabilities, with the majority of flaws being cross-site scripting or old versions of software that have not been updated. A method is proposed for the securing of web pharmacy sites, using a multi-phased approach of technical and managerial techniques together with a thorough understanding of national legal requirements for securing systems

A randomised controlled trial to compare opt-in and opt-out parental consent for childhood vaccine safety surveillance using data linkage: study protocol

Extent: 10p.Background: The Vaccine Assessment using Linked Data (VALiD) trial compared opt-in and opt-out parental consent for a population-based childhood vaccine safety surveillance program using data linkage. A subsequent telephone interview of all households enrolled in the trial elicited parental intent regarding the return or non-return of reply forms for opt-in and opt-out consent. This paper describes the rationale for the trial and provides an overview of the design and methods. Methods/Design: Single-centre, single-blind, randomised controlled trial (RCT) stratified by firstborn status. Mothers who gave birth at one tertiary South Australian hospital were randomised at six weeks post-partum to receive an opt-in or opt-out reply form, along with information explaining data linkage. The primary outcome at 10 weeks post-partum was parental participation in each arm, as indicated by the respective return or non-return of a reply form (or via telephone or email response). A subsequent telephone interview at 10 weeks post-partum elicited parental intent regarding the return or non-return of the reply form, and attitudes and knowledge about data linkage, vaccine safety, consent preferences and vaccination practices. Enrolment began in July 2009 and 1,129 households were recruited in a three-month period. Analysis has not yet been undertaken. The participation rate and selection bias for each method of consent will be compared when the data are analysed. Discussion: The VALiD RCT represents the first trial of opt-in versus opt-out consent for a data linkage study that assesses consent preferences and intent compared with actual opting in or opting out behaviour, and socioeconomic factors. The limitations to generalisability are discussed.Jesia G Berry, Philip Ryan, Annette J Braunack-Mayer, Katherine M Duszynski, Vicki Xafis, Michael S Gold, the Vaccine Assessment Using Linked Data (VALiD) Working Grou

Use of data linkage to improve communicable disease surveillance and control in Australia: Existing practices, barriers and enablers

Objectives: To review the use of data linkage by Australian state and territory communicable disease control units, and to identify barriers to and enablers of data linkage to inform communicable disease surveillance and control activities.Methods: Semi-structured telephone interviews were carried out with one key informant from communicable disease control units in all eight Australian states and territories between October 2017 and January 2018.Results: Key informants from all Australian states and territories participated in the interview. A variety of existing practices were identified, with few jurisdictions making systematic use of available data linkage infrastructure. Key barriers identified from the review included: a lack of perceived need; system factors; and resources. Existing regulatory tools enable data linkage to enhance communicable disease surveillance and control.Conclusions: We identified considerable variation in the use of data linkage to inform communicable disease surveillance and control activities between jurisdictions. We suggest that routinely collected, disparate data are systematically integrated into existing surveillance and response policy cycle to improve communicable disease prevention and control efforts.Implications for public health: Existing gaps in communicable disease surveillance data may affect prevention and control efforts. Data linkage is recognised as a valuable method to close surveillance gaps and should be used to enhance the value of publicly held health data

Privacy Commissioner comments on draft Access Card legislation

Responding to the exposure draft of the legislation governing the health and social services access card and accompanying system, the Privacy Commissioner, Karen Curtis, has suggested a number of changes, outlined in this submission to the federal government

Submission to the Australian Law Reform Commission's review of privacy

In this detailed submission to the Australian Law Reform Commission\u27s review of privacy laws, the Privacy Commissioner, Karen Curtis, calls for changes to a number of laws. She argues that enhanced consistency across the laws would help ensure there are adequate privacy safeguards in the telecommunications industry, reduce complexity for businesses, and assist consumers in understanding their privacy rights