title: Eliciting and characterizing scenarios of disclosure of private health data.
abstract: Sensitive health information is kept in Electronic Health Records (EHRs) which makes the data accessible, enabling its transfer against patient consent. Hence, the need for privacy-preserving mechanisms is a top priority. As a first step towards the development of privacy-preserving access control language, we used qualitative research methods to characterize scenarios of requests for disclosure of patient data and identify the entities involved, the context of the request, and the requested data.
authors.affiliation: Faculty of Industrial Engineering, Technion, Israel Institute of Technology, Haifa, 32000, Israel.
authors.forename: Dizza
authors.initials: D
authors.lastname: Beimel
authors.forename: Mor
authors.initials: M
authors.lastname: Peleg
authors.forename: Dov
authors.initials: D
authors.lastname: Dori
authors.forename: Jacob
authors.initials: J
authors.lastname: Slonim
mesh_terms: D003219:Confidentiality; D030881:Disclosure; D006801:Humans; D007407:Interviews as Topic; D016347:Medical Records Systems, Computerized; D017146:Models, Organizational; D011795:Surveys and Questionnaires