评估移动个人健康记录中的隐私政策。

Assessing the privacy policies in mobile personal health records.

作者信息

Zapata Belén Cruz, Hernández Niñirola Antonio, Fernández-Alemán José Luis, Toval Ambrosio

出版信息

Annu Int Conf IEEE Eng Med Biol Soc. 2014;2014:4956-9. doi: 10.1109/EMBC.2014.6944736.

DOI:10.1109/EMBC.2014.6944736

Abstract

The huge increase in the number and use of smartphones and tablets has led health service providers to take an interest in mHealth. Popular mobile app markets like Apple App Store or Google Play contain thousands of health applications. Although mobile personal health records (mPHRs) have a number of benefits, important challenges appear in the form of adoption barriers. Security and privacy have been identified as part of these barriers and should be addressed. This paper analyzes and assesses a total of 24 free mPHRs for Android and iOS. Characteristics regarding privacy and security were extracted from the HIPAA. The results show important differences in both the mPHRs and the characteristics analyzed. A questionnaire containing six questions concerning privacy policies was defined. Our questionnaire may assist developers and stakeholders to evaluate the security and privacy of their mPHRs.

摘要

智能手机和平板电脑数量及使用量的大幅增长，促使医疗服务提供商对移动医疗（mHealth）产生了兴趣。像苹果应用商店或谷歌应用商店这样的热门移动应用市场包含数千款健康应用程序。尽管移动个人健康记录（mPHR）有诸多益处，但采用障碍形式的重要挑战也随之出现。安全和隐私已被认定为这些障碍的一部分，应当加以解决。本文对安卓和iOS系统的总共24款免费移动个人健康记录应用程序进行了分析和评估。从《健康保险流通与责任法案》（HIPAA）中提取了与隐私和安全相关的特征。结果显示，在移动个人健康记录应用程序以及所分析的特征方面都存在重大差异。定义了一份包含六个关于隐私政策问题的调查问卷。我们的调查问卷可能有助于开发者和利益相关者评估其移动个人健康记录应用程序的安全性和隐私性。