Nepal HMIS FHIR Implementation Guide – 🚨 DRAFT VERSION - Local Development build (v0.0.1-ballot) built by the FHIR (HL7® FHIR® Standard) Build Tools. See the Directory of published versions

Security and Privacy

When implementing NP Core, implementers need to be aware of FHIR security considerations and implement measures to protect information privacy and prevent exploitation by malicious actors.

Those implementing NP Core are also advised to review the FHIR Implementer Safety Checklist for important considerations in secure and safe system implementation.

Implementers of NP Core need to be aware of their obligations regarding security, privacy, and consent in Nepal.

NP Core Specific Security Requirements

• Systems SHOULD conform to FHIR Communications Security requirements.
• Systems SHOULD support SMART App Launch for client authentication and authorisation.
• Systems SHALL use TLS version 1.2 or higher for data exchange.
• Systems SHOULD use TLS version 1.3 for data exchange.
• Systems SHOULD use the Cyber Security Byelaw, 2077 (2020).