Governance of health data in cyberspace
We have just been awarded €1.163.169 for a socio-legal project called the “Governance of Health Data in Cyberspace”.
Outline of Project
In the 21st century, successful healthcare delivery and medical research are increasingly dependent on the collection and distribution of information in cyberspace, with potentially enormous benefits for society; however the risks associated with misuse of data are significant. Iceland, Sweden, Norway and the UK provide case studies of where initiatives have raised public outcry because of a failure to fully comprehend social expectations about the use of health data online. Our theory is that when data collected for health reasons is used in other contexts, or data collected for other purposes is used in the context of healthcare, a boundary is breached. This challenges the contextual integrity of the data (that is, considering the specific values and expectations linked to data collected for a particular reason and how they change if the reason or situation for collecting data changes), and thus may threaten public trust.
The central aim of this project is to develop recommendations for resilient governance mechanisms for health cyberspace that can meet social expectations regarding the security and privacy of health data, while enabling broad use of health data to benefit society. We will apply the theoretical lens of contextual integrity, and review current approaches to governance across other sectors, along with the ethical issues that arise with online data. This will enable us to analyse whether certain data usage contravenes the norms of a particular context, and therefore whether current governance mechanisms are appropriate, or if new law and forms of public engagement and governance are needed. This inter-disciplinary project will use a variety of ways to understand the issues of risk and resilience in the governance of health cyberspace in Northern Europe. These will include using focus groups with experts and citizens and a discrete choice experiment in which we ask participants to choose between set responses. From the results of these we will obtain an understanding of what citizens perceive their risk to be when data is used in health cyberspace. Using these findings we will develop recommendations for governance in cyberspace, for the benefit of healthcare and other sectors.
In the 21st century, successful healthcare delivery and medical research are increasingly dependent on the collection and distribution of information through digital and electronic means, including computerised health records that are accessed and distributed through online platforms mobile applications among other avenues. The ability to move data in this way brings benefits for healthcare, research, and society, but introduces new risks associated with the misuse or improper access of data. Researchers in Sweden, Iceland, Norway and the UK are working together to investigate these issues and explore public attitudes in the project titled ‘Governance of health data in Cyber Space’.
We propose that when data collected for health reasons is used in other contexts, or when data is collected for other purposes and is used in the context of healthcare, it crosses a boundary. Ensuring that the laws surrounding data use are acting in the interest of society requires an in-depth investigation about whether the current laws, regulations and policies appropriately protect data from misuse when it crosses boundaries, and what needs to change.
For this it is important to open up a dialogue with the public so that we can understand what they perceive the risks and benefits to be when they volunteer information in different circumstances, how they expect their data to be used, in what situations they would choose to deny data access, and how those factors shape decision making. The central aim of this project is to develop recommendations aimed at ensuring that the exchange of data in cyberspace meets social expectations regarding the security and privacy of health data, while enabling the benefits this data could bring to society. We will be running focus groups and an online survey with people from different areas of society to discuss the use of data in different situations, with the hope of identifying social expectations about the use of health data digitally.