Abstract
AIM AND METHOD: Short narrative overview based on regulations by law, individual experiences from daily practice and selected references from current literature. RESULTS (SELECTIVE CORNER POINTS): Information security and data protection are mandatory and indispensable elements by law of general, professional and social actions, which can be also considered substantial parts of quality management. Therefore, (general/abdominal) surgeon underlies it too. INFORMATION SECURITY: It comprises the protection of information of each type and origin - it serves the warranty of the basic aims such as confidentiality, integrity, availability and authenticity of information, which supports both aims of a clinician, patient safety and treatment effectiveness. DATA PROTECTION: It is considered a basic right to protect personal data against abusive processing - however, data security is not the primary aim, but rather the right for informational self-determination. IT EMERGENCY MANAGEMENT: It implies that in case of an IT emergency (released by a persisting system failure or cyberattack), logistic operations are transferred into previously defined emergency procedures well organized and possibly with no interruption - digital logistic operations become suddenly complete analogous processes, with exclusive responsibility of the single institutes and departments. CONCLUSION: Both sides benefit equally from a regular bilateral exchange between the surgeon and the information security and data protection officer and are able to ensure the common goals of patient safety and treatment effectiveness through a proportionate integration of information security and data protection into everyday clinical practice.