36 - Communications, Science and Technology and representatives of such sectors as tourism and financial services and consumer groups, should review the development of sector-specific legislation or regulation, possibly backed by industry codes of conduct, to ensure the adoption of the appropriate privacy protection principles by key industrial sectors. The Ministry of Health in conjunction with the Ministry of Local Government and in consultation with stakeholders from both the public and private health systems, such as the hospitals, local medical associations, the Health Professions Council, the National AIDS Coordinating Agency, and the Ministry of Communications, Science and Technology, and consumer and civil liberties groups should review the development of legislation or rules, possibly backed by sector and professional codes of conduct, that would ensure the privacy and security of personal data in health records. 5.0 Security of Information Systems and Networks: A Culture of Security 5.1 Objective: • Ensuring that Botswana has in place a “culture of security,” including legislation and policies that will allow for the effective implementation of legislation and policies regarding the protection of personal privacy and personal data, as well as other sensitive and significant data and infrastructure. 5.2 Issues: • Co-ordination with work being done by the Infrastructure and Security Task Force to ensure that the implications of privacy and data protection are being taken into consideration in the planning and building of Botswana’s telecommunications infrastructure. • Co-ordination with work being done by the e-Government and Education and Training Task Forces to ensure that the appropriate policies and training are in place so that individuals in both the government and the private sector have in place and understand the importance of policies and procedures to maintain security dealing with the protection of data and personal privacy. • Development of a public policy dealing with cryptology and encouragement of the use of appropriate cryptology (such as “Pretty Good Privacy” to encourage trust in the Internet and e-commerce. 5.3 Discussion: 5.3.1 The privacy provisions of the European Union Directive On the Protection of Individuals with Regard to the Processing of Personal Data and on the Free Movement of Such Data, the OECD Guidelines