Health data security and privacy: Challenges and solutions for the future
Kassaye Yitbarek Yigzaw (Norwegian Centre for E-health Research)
Sílvia Delgado Olabarriaga (Amsterdam UMC)
Antonis Michalas (Tampere University)
Luis Marco-Ruiz (Norwegian Centre for E-health Research)
Christiaan Hillen (Secura)
Yiannis Verginadis (Athens University of Economics and Business)
Marcela Tuler de Oliveira (Amsterdam UMC)
Dagmar Krefting (University of Göttingen)
Thomas Penzel (Max-Delbrück-Center for Molecular Medicine and Charité Universitätsmedizin Berlin)
James Bowden (Hochschule Für Technik Und Wirtschaft)
Johan Gustav Bellika (Norwegian Centre for E-health Research)
Taridzo Chomutare (Norwegian Centre for E-health Research)
More Info
expand_more
Abstract
This chapter reviews the common health data security and privacy challenges to provide an overview of the context—the concerns and the types of cybersecurity threats that healthcare institutions face. Also highlighted are the latest scientific work related to two primary solutions for protecting health data used for individual care, namely, access control and cryptography and two additional solutions for protecting data used for secondary purposes, namely, data de-identification and privacy-preserving distributed data mining (PPDDM). We exemplify implementation of these solutions using three real-life use cases in healthcare and pivot our discussion on how healthcare institutions can develop cybersecurity policy and prepare themselves for complying with relevant security and privacy regulations like Europe’s General Data Protection Regulation (GDPR) and the Healthcare Insurance Portability and the Accountability Act (HIPAA) in the United States.