36
-
Communications, Science and Technology and representatives of
such sectors as tourism and financial services and consumer groups,
should review the development of sector-specific legislation or
regulation, possibly backed by industry codes of conduct, to ensure
the adoption of the appropriate privacy protection principles by key
industrial sectors.
The Ministry of Health in conjunction with the Ministry of Local
Government and in consultation with stakeholders from both the
public and private health systems, such as the hospitals, local
medical associations, the Health Professions Council, the National
AIDS Coordinating Agency, and the Ministry of Communications,
Science and Technology, and consumer and civil liberties groups
should review the development of legislation or rules, possibly
backed by sector and professional codes of conduct, that would
ensure the privacy and security of personal data in health records.
5.0 Security of Information Systems and Networks: A Culture of
Security
5.1
Objective:
• Ensuring that Botswana has in place a “culture of security,”
including legislation and policies that will allow for the effective
implementation of legislation and policies regarding the protection
of personal privacy and personal data, as well as other sensitive and
significant data and infrastructure.
5.2
Issues:
• Co-ordination with work being done by the Infrastructure and
Security Task Force to ensure that the implications of privacy and
data protection are being taken into consideration in the planning and
building of Botswana’s telecommunications infrastructure.
• Co-ordination with work being done by the e-Government and
Education and Training Task Forces to ensure that the appropriate
policies and training are in place so that individuals in both the
government and the private sector have in place and understand the
importance of policies and procedures to maintain security dealing
with the protection of data and personal privacy.
• Development of a public policy dealing with cryptology and
encouragement of the use of appropriate cryptology (such as “Pretty
Good Privacy” to encourage trust in the Internet and e-commerce.
5.3
Discussion:
5.3.1 The privacy provisions of the European Union Directive On the
Protection of Individuals with Regard to the Processing of Personal
Data and on the Free Movement of Such Data, the OECD Guidelines