Privacy compliance in European healthgrid domains: an ontology-based approach

Boussi Rahmouni, Hanene; Solomonides, Tony; Casassa Mont, Marco; Shiu, Simon

Abstract

The integration of different European medical systems by means of grid technologies will continue to be challenging if technology does not intervene to enhance interoperability between national regulatory frameworks on data protection. Achieving compliance in European healthgrid domains is crucial but challenging because of the diversity and complexity of Member State legislation across Europe. Lack of automation and inconsistency of processes across health¬care organizations increase the complexity of the compliance task. In the absence of automation, the compliance task entails human intervention. In this paper we present an approach to automate privacy requirements for the sharing of patient data between Member States across Europe in a healthgrid domain and ensure its enforcement internally and within external domains where the data might travel. This approach is based on the semantic modelling of privacy obligations that are of legal, ethical or cultural nature. Our model reflects both similarities and conflicts, if any, between the different Member States. This will allow us to reason on the safeguards a data controller should demand from an organization belonging to another Member State before disclosing medical data to them. The system will also generate the relevant set of policies to be enforced at the process level of the grid to ensure privacy compliance before allowing access to the data.

• Journal Article Type: Article
• Conference Name: 22nd IEEE International Symposium on Computer-Based Medical Systems, 2009. CBMS 2009.
• Start Date: Aug 3, 2009
• End Date: Aug 4, 2009
• Publication Date: Sep 22, 2009
• Deposit Date: Nov 4, 2010
• Publicly Available Date: Sep 19, 2016
• Journal: 22nd IEEE International Symposium on Computer-Based Medical Systems, 2009. CBMS 2009. Albuquerque, NM.
• Print ISSN: 1063-7125
• Peer Reviewed: Peer Reviewed
• Volume: 2-5 Au
• Pages: 1-8
• Keywords: privacy, healthcare, EU, grid, OWL, rules, biomedical research
• Public URL: https://uwe-repository.worktribe.com/output/992327
• Publisher URL: http://dx.doi.org/10.1109/CBMS.2009.5255423
• Related Public URLs: http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5255423; http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5255423
• Additional Information: Additional Information : Copyright © 2009 IEEE. Reprinted from 22nd IEEE International Symposium on Computer-Based Medical Systems, 2009. CBMS 2009. 2-5 August 2009. pp. 1-8. ISSN 1063-7125. This material is posted here with permission of the IEEE. Such permission of the IEEE does not in any way imply IEEE endorsement of any of the products or services of the University of the West of England. Internal or personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution must be obtained from the IEEE by writing to [e-mail]. By choosing to view this document, you agree to all provisions of the copyright laws protecting it.
• Contract Date: Sep 19, 2016