The goal is to adapt the software to more stringent requirements for the treatment and management of health information, to protect the rights of data subjects, guaranteeing privacy and confidentiality.

The aim is to fully adhere to the EU GDPR, and therefore to widely welcome (and to implement) several indications for the best data protection.

These indications cover the following areas: spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privileges, library weakness.

The order of implementation is by priority HIGH > MEDIUM > LOW

Full doc is found at