Question

Information systems questions

Business Processes and Information Systems:

Mini case: A customer just visited his doctor and got a prescription. The prescription is about getting one medicine which has one refill. Assuming you are a manger in a pharmacy where this customer will fill the prescription.

Q1, Please break the pharmacy IS (information system) business process (starting from the time point when a prescription arrives at your pharmacy to the time point when this customer receives all the medicine including the refill) into 10-15 smaller IS-related business processes. For each smaller business process, please identify and describe the 4 components of that business process (i.e. activity, resource, facility, and information).  Note: You can either draw a graph or use text. Any format will do as long as the contents of your analysis are correct.

Q2. At each of these business processes, if an IS is used, please identify its components: IT (hardware, software, networks, data), people, and business process.

Q3. As a manager of a pharmacy, how can you improve some of the small business processes (i.e. those in Q1) with a new IS or a new IS function in order to create more business value?

IT governance and privacy

Q4. What is PIPEDA (Personal Information Protection and Electronic Documents Act)? How does PIPEDA restrict the use of personal information by organizations? Can an individual sue an organization because of PIPEDA?

Q5. What kind of policies should you set up in your pharmacy in order to comply with PIPEDA?

Thanks

Answer 1

Ans.4) The Personal Information Protection and Electronic Documents Act (PIPEDA) is the government security law for private- sector organizations. It determines the standard protocol for the organizations to deal with individual data over the span of business action. PIPEDA requires private-sector organizations to gather, use or reveal your own data by reasonable and legal methods, with your assent, and just for purposes that are expressed and sensible.

PIPEDA restrict the use of personal information by organizations in several ways. An organization just assembles individual data that is fundamental to the business exchange. On the off chance that additional data is asked for, an individual is entitled for inquire as to why and to decline to provide it on the off chance that you are disappointed with the appropriate response. One should in any case have the capacity to finish the transaction, regardless of whether you will not give out more close to personal information than is justified.

Organizations are likewise obliged to ensure your own data through fitting safety efforts, and to obliterate it when it's never again required for the first purposes.

Every individual has right to expect the individual data the association holds about themselves to be accurate, complete and up-to-date.

5.) Policies designed for a pharmacy in order to comply with PIPEDA is given below-

• At least one people inside your pharmacy is in charge of actualizing and administering protection consistence.
• Guarantee that legitimate confidentiality and legal privacy agreements are set up with specialist co-ops, associates and so on.
• Distinguish the different purposes for which the drug store gathers, utilizes and unveils individual data.
• Build up an external communications plan that will give patients sensible notice of the pharmacy’s privacy practices.
• Create and actualize privacy policies and practices for the drug store.
• Audit existing security shields to guarantee individual data under the control of the drug store is legitimately ensured.
• Review existing security safeguards to ensure personal information under the control of the pharmacy is properly protected.