Modern e-Health systems require innovative solutions for data protection and overall information system security on the one hand and mechanisms for data share, taking into account personal data protection laws and regulations on the other hand. This article will show specific problems for data protection for Medical images collected in DICOM format and propose solutions for security incident reporting and tracking. Main issues that should be taken into account and addressed is the fact that not only metadata could be treated as personal data, but so is for any data that can be used to identify a person, because the latest software solutions could restore human face based on set of X-ray films that can be used to identify a person. Those tasks for data protection can be solved by using innovative ticketing and monitoring systems that are described in this article.