Privacy compliance and enforcement on European healthgrids: An approach through ontology

Rahmouni, Hanene Boussi; Solomonides, Tony; Mont, Marco Casassa; Simon Shiu, Simon

Abstract

The sharing of medical data between different healthcare organizations in Europe must comply with the legislation of the Member State where the data were originally collected. These legal requirements may differ from one state to another. Privacy requirements such as patient consent may be subject to conflicting conditions between different national frameworks as well as between different legal and ethical frameworks within a single Member State. These circumstances have made the compliance management process in European healthgrids very challenging. In this paper, we present an approach to tackle these issues by relying on several technologies in the semantic Web stack. Our work suggests a direct mapping from high-level legislation on privacy and data protection to operational-level privacy-aware controls. Additionally, we suggest an architecture for the enforcement of these controls on access control models adopted in healthgrid security infrastructures. © 2010 The Royal Society.

• Presentation Conference Type: Conference Paper (published)
• Publication Date: Sep 13, 2010
• Deposit Date: Nov 5, 2010
• Journal: Philosophical Transactions of the Royal Society A: Mathematical, Physical and Engineering Sciences
• Print ISSN: 1471-2962
• Publisher: Royal Society, The
• Peer Reviewed: Not Peer Reviewed
• Volume: 368
• Issue: 1926
• Pages: 4057-4072
• DOI: https://doi.org/10.1098/rsta.2010.0169
• Keywords: privacy compliance; health; grid; ontologies; eXtensible Access Control; Mark-up Language
• Public URL: https://uwe-repository.worktribe.com/output/975061
• Publisher URL: http://dx.doi.org/10.1098/rsta.2010.0169
• Related Public URLs: http://rsta.royalsocietypublishing.org/
• Additional Information: Corporate Creators : UWE, Bristol, HP Labs Bristol
• Contract Date: Nov 15, 2016