external, intentional and unintentional. Therefore, one will find health information systems professionals having these particular threats in mind when discussing ways to protect the health information of patients. It has been found that there is a lack of security awareness among health care professionals in countries such as Spain. The Health Insurance Portability and Accountability Act (HIPAA) has developed a framework to mitigate the harm of these threats that is comprehensive but not so specific as to limit the options of healthcare professionals who may have access to different technology. Personal Information Protection and Electronic Documents Act (PIPEDA) was given Royal Assent in Canada on 13 April 2000 to establish rules on the use, disclosure and collection of personal information. The personal information includes both non-digital and electronic form. In 2002, PIPEDA extended to the health sector in Stage 2 of the law's implementation. There are four provinces where this law does not apply because its privacy law was considered similar to PIPEDA: Alberta, British Columbia, Ontario and Quebec. The COVID-19 pandemic in the United Kingdom led to radical changes. NHS Digital and NHSX made changes, said to be only for the duration of the crisis, to the information sharing system GP Connect across England, meaning that patient records are shared across primary care. Only patients who have specifically opted out are excluded. Legal issues Liability Legal liability in all aspects of healthcare was an increasing problem in the 1990s and 2000s. The surge in the per capita number of attorneys in the USA and changes in the tort system caused an increase in the cost of every aspect of healthcare, and healthcare technology was no exception. Failure or damages caused during installation or utilization of an EHR system has been feared as a threat in lawsuits. Similarly, it's important to recognize that the implementation of electronic health records carries with it significant legal risks. This liability concern was of special concern for small EHR system makers. Some smaller companies may be forced to abandon markets based on the regional liability climate. Larger EHR providers (or government-sponsored providers of EHRs) are better able to withstand legal assaults. While there is no argument that electronic documentation of patient visits and data brings improved patient care, there is increasing concern that such documentation could open physicians to an increased incidence of malpractice suits. Disabling physician alerts, selecting from dropdown menus, and the