Health informatics. Guidelines on data protection to facilitate trans-border flows of personal health information

The Protection of Personal Information Act (POPIA) 2013 came into force in South Africa on 1 July 2020. It seeks to strengthen the processing of personal information, including health information. While POPIA is to be welcomed, there are concerns about the impact it will have on the processing of health information. To ensure that the National Health Laboratory Service [NHLS] is compliant with these new strict processing requirements and that compliance does not negatively impact upon its current screening, treatment, surveillance and research mandate, it was decided to consider the development of a NHLS POPIA Code of Conduct for Personal Health. As part of the process of developing such a Code and better understand the challenges faced in the processing of personal health information in South Africa, 19 semi-structured interviews with stakeholders were conducted between June and September 2020. Overall, respondents welcomed the introduction of POPIA. However, they felt that there are tensions between the strengthening of data protection and the use of personal information for individual patient care, treatment programmes, and research. Respondents reported a need to rethink the management of personal health information in South Africa and identified 5 issues needing to be addressed at a national and an institutional level: an understanding of the importance of personal information; an understanding of POPIA and data protection; improve data quality; improve transparency in data use; and improve accountability in data use. The application of POPIA to the processing of personal health information is challenging, complex, and likely costly. However, personal health information must be appropriately managed to ensure the privacy of the data subject is protected, but equally that it is used as a resource in the individual’s and wider public interest.

Download Full-text

Health informatics. Principles and data requirements for consent in the Collection, Use or Disclosure of personal health information

10.3403/30266983 ◽

2015 ◽

Keyword(s):

Health Information ◽

Health Informatics ◽

Personal Health Information ◽

Personal Health ◽

Data Requirements

Download Full-text

Findings from 2017 on Consumer Health Informatics and Education: Health Data Access and Sharing

Yearbook of Medical Informatics ◽

10.1055/s-0038-1641218 ◽

2018 ◽

Vol 27 (01) ◽

pp. 163-169 ◽

Cited By ~ 1

Author(s):

Pascal Staccini ◽

Annie Lau ◽

Keyword(s):

Health Information ◽

Data Sharing ◽

Health Informatics ◽

Data Access ◽

Health Data ◽

Demographic Characteristics ◽

Personal Health Information ◽

Consumer Health Informatics ◽

Personal Health ◽

Consumer Health

Objective: To summarize the state of the art during the year 2017 in consumer health informatics and education, with a special emphasis on sharing health data and accessing personal health information (PHI) from patients' and consumers' perspective. Methods: We conducted a systematic search of articles published in PubMed using a predefined set of queries which identified 228 potential articles for review. The section editors then screened these articles according to topic relevance and selected 15 candidate best papers for full review and scoring by a panel of international experts. Based on the scores and the reviews, four papers received the highest score and were selected in a consensus meeting as the best papers on health data access and sharing from consumers' and patients' perspective. Results: These four papers were categorised into the following topics: 1) data sharing for research and governance in privacy protection; 2) use of personal health information and individual privacy concerns; and 3) consumers' views and demographic characteristics regarding health data sharing and the use of digital health portals. Overall, it was surprising to see only a small number of papers reporting original research in this area. Conclusions: Patients understand the need for sharing information to facilitate best care and to enrich biomedical knowledge. When confronted with the reality of accessing information systems for their own information, patients are concerned about usability as well as privacy. Overall, there is a need for more emphasis on: 1) considering privacy as a feature defined by design; 2) using specific consent approaches and data sharing mechanisms for recruiting clinical trial participants; 3) taking into account socio-demographic characteristics when promoting consumer access to personal health information; and 4) defining indicators of high-quality care to incorporate healthcare professionals' level of caution when accessing patients' medical information and fostering patient trust in data exchange. Ultimately, privacy mechanisms should be part of the design process and not only be implemented when security has been breached and violated.

Download Full-text