Eliciting and characterizing scenarios of disclosure of private health data.
Sensitive health information is kept in Electronic Health Records (EHRs) which makes the data accessible, enabling its transfer against patient consent. Hence, the need for privacy-preserving mechanisms is a top priority. As a first step towards the development of privacy-preserving access control language, we used qualitative research methods to characterize scenarios of requests for disclosure of patient data and identify the entities involved, the context of the request, and the requested data.
Beimel
Dizza
D
Faculty of Industrial Engineering, Technion, Israel Institute of Technology, Haifa, 32000, Israel.
Peleg
Mor
M
Dori
Dov
D
Slonim
Jacob
J
D003219:Confidentiality; D030881:Disclosure; D006801:Humans; D007407:Interviews as Topic; D016347:Medical Records Systems, Computerized; D017146:Models, Organizational; D011795:Surveys and Questionnaires