title: Framework model and principles for trusted information sharing in pervasive health.
abstract: Trustfulness (i.e. health and wellness information is processed ethically, and privacy is guaranteed) is one of the cornerstones for future Personal Health Systems, ubiquitous healthcare and pervasive health. Trust in today's healthcare is organizational, static and predefined. Pervasive health takes place in an open and untrusted information space where person's lifelong health and wellness information together with contextual data are dynamically collected and used by many stakeholders. This generates new threats that do not exist in today's eHealth systems. Our analysis shows that the way security and trust are implemented in today's healthcare cannot guarantee information autonomy and trustfulness in pervasive health. Based on a framework model of pervasive health and risks analysis of ubiquitous information space, we have formulated principles which enable trusted information sharing in pervasive health. Principles imply that the data subject should have the right to dynamically verify trust and to control the use of her health information, as well as the right to set situation based context-aware personal policies. Data collectors and processors have responsibilities including transparency of information processing, and openness of interests, policies and environmental features. Our principles create a base for successful management of privacy and information autonomy in pervasive health. They also imply that it is necessary to create new data models for personal health information and new architectures which support situation depending trust and privacy management.
authors: National Institute for Health and Welfare, Finland. pekka.ruotsalainen@thl.fi
authors: Pekka
authors: P
authors: Ruotsalainen
authors: Bernd
authors: B
authors: Blobel
authors: Pirkko
authors: P
authors: Nykänen
authors: Antto
authors: A
authors: Seppälä
authors: Hannu
authors: H
authors: Sorvari
mesh_terms: D022126:Access to Information; D003195:Computer Communication Networks / Q000592:standards*; D016494:Computer Security; D003199:Computer Systems; D003219:Confidentiality; D055991:Health Records, Personal; D006801:Humans; D007255:Information Services / Q000592:standards*; D007256:Information Systems / Q000592:standards; D008490:Medical Informatics / Q000379:methods*; D016347:Medical Records Systems, Computerized / Q000592:standards*; D017146:Models, Organizational; D018907:Privacy; D015203:Reproducibility of Results