scope:

Is designed to improve the authentication of individual users of health care IT system, by strenghtening the automatic software procedures associated with the management of user identifiers and passwords, without resorting to additional hardware facilities. Applies to all information systems (hereafter called systems) within the health care environment that handle or store sensitive person identifiable health information, using passwords as the only means of authenticating the entered user identifier, i.e. verifying the claimed identity of a user. Systems that fall within the scope of this European Prestandard include for example electronic patient record systems, patient administrative systems and laboratory systems, containing personal health information.