Personal health records, global policy and regulation review. Issue 8 (August 2018)

• Record Type: Journal Article
• Authors: Flaumenhaft, Yakov; Ben-Assuli, Ofir
• Is Part Of: Health policy. Volume 122:Issue 8(2018)
• Page Start: 815
• Page End: 826
• Publication Date: 2018-08
• Subjects: Personal health records -- Regulation -- Privacy -- Security; Medical education -- Periodicals; Medical policy -- Periodicals; Delivery of Health Care -- Periodicals; Education, Medical -- Periodicals; Health Education -- Periodicals; Health Planning -- Periodicals; Public Policy -- Periodicals; Enseignement médical -- Périodiques; Politique sanitaire -- Périodiques; Medical education; Medical policy; Periodicals; Electronic journals; Electronic journals; 362.1
• DOI: 10.1016/j.healthpol.2018.05.002
• Languages: English
• ISSNs: 0168-8510

Abstract

Highlights: Discussing PHR privacy and security concerns. Comparing various countries. Reviewing legislation and regulation. Discussing policy implications. Abstract: Personal health records (PHR) have been endorsed as a promising tool for the self-management of an individual's medical information, affording benefits to both the individual patient and the healthcare system as a whole. Nevertheless, adoption rates have been relatively slow and widespread acceptance has yet to be achieved. A significant obstacle often cited as delaying the implementation of these systems has been concern regarding the ability to properly ensure the security and privacy of this sensitive information. This article reviews the current legislative landscape in various countries, examining the degree to which they address these issues and support the implementation of PHR's. This review compares in particular a number of prominent components of health data security and privacy across five different legislative jurisdictions in order to allow for a closer examination of regulatory approaches and measures. Of the legislation reviewed the EU's GDPR stands out as seemingly providing the most comprehensive and stringent protection measures, yet nonetheless appears to leave significant room for interpretation and a degree of ambiguity in key areas. The results of this comparison, demonstrate considerable variances with regards to legal terminology and the degree of compliance required from entities offering PHR services across various jurisdictions. The paper ends with a discussion of specific policy implications and recommendations stemming from the current legislative state of affairs.