ADOPTED_FROM:CR 14301:2002 This CEN Report aims at promoting a better understanding of the security issues in relation to health care (HC) IT-communication, to point at already existing applicable International and European standards. The notion of a framework used in this report does not embody functional security models or specifications that constitute a basis for implementation of systems. This framework comprises identification and discussion of relevant issues, indicating other related standardization work in this area, and indicating the need for specific healthcare standards in the field.