Enablers and barriers to the secondary use of health data in Europe: general data protection regulation perspective.

Data sharing GDPRGeneral Data Protection Regulation Secondary health data

Journal

Archives of public health = Archives belges de sante publique
ISSN: 0778-7367
Titre abrégé: Arch Public Health
Pays: England
ID NLM: 9208826

Informations de publication

Date de publication:
09 Apr 2022
Historique:
received: 18 08 2021
accepted: 24 03 2022
entrez: 10 4 2022
pubmed: 11 4 2022
medline: 11 4 2022
Statut: epublish

Résumé

The General Data Protection Regulation is a regulation in EU law on data protection and privacy in the European Union. We aimed to provide an overview of the General Data Protection Regulation (GDPR) enablers and barriers to the secondary use of health data in Europe from the research we conducted in the Joint Action InfAct (Information for Action!) WP10 Assessing and piloting interoperability for public health policy, as well as to provide an example of a national-level case study on experiences with secondary use of health data and GDPR on an example of the Austrian COVID-19 data platform. We have identified a number of European initiatives, projects and organizations that have dealt with cross-border health data sharing, linkage and management by desk research and we conducted 17 semi-structured in-depth interviews and analyzed the interview transcripts by framework analysis. GDPR was seen as an enabler to the secondary use of health data in Europe when it comes to user rights over their data, pre-existing laws regarding data privacy and data sharing, sharing anonymized statistics, developing new data analysis approaches, patients` trust towards dealing with their health data and transparency. GDPR was seen as a barrier to the secondary use of health data in Europe when it comes to identifiable and individual-level data, data sharing, time needed to complete the process, workload increase, differences with local legal legislations, different (and stricter) interpretations and access to data. The results of our analysis show that GDPR acts as both an enabler and a barrier for the secondary use of health data in Europe. More research is needed to better understand the effects of GDPR on the secondary use of health data which can serve as a basis for future changes in the regulation.

Sections du résumé

BACKGROUND BACKGROUND
The General Data Protection Regulation is a regulation in EU law on data protection and privacy in the European Union. We aimed to provide an overview of the General Data Protection Regulation (GDPR) enablers and barriers to the secondary use of health data in Europe from the research we conducted in the Joint Action InfAct (Information for Action!) WP10 Assessing and piloting interoperability for public health policy, as well as to provide an example of a national-level case study on experiences with secondary use of health data and GDPR on an example of the Austrian COVID-19 data platform.
METHODS METHODS
We have identified a number of European initiatives, projects and organizations that have dealt with cross-border health data sharing, linkage and management by desk research and we conducted 17 semi-structured in-depth interviews and analyzed the interview transcripts by framework analysis.
RESULTS RESULTS
GDPR was seen as an enabler to the secondary use of health data in Europe when it comes to user rights over their data, pre-existing laws regarding data privacy and data sharing, sharing anonymized statistics, developing new data analysis approaches, patients` trust towards dealing with their health data and transparency. GDPR was seen as a barrier to the secondary use of health data in Europe when it comes to identifiable and individual-level data, data sharing, time needed to complete the process, workload increase, differences with local legal legislations, different (and stricter) interpretations and access to data.
CONCLUSION CONCLUSIONS
The results of our analysis show that GDPR acts as both an enabler and a barrier for the secondary use of health data in Europe. More research is needed to better understand the effects of GDPR on the secondary use of health data which can serve as a basis for future changes in the regulation.

Identifiants

pubmed: 35397557
doi: 10.1186/s13690-022-00866-7
pii: 10.1186/s13690-022-00866-7
pmc: PMC8994086
doi:

Types de publication

Journal Article

Langues

eng

Pagination

115

Subventions

Organisme : third health programme
ID : 801553

Informations de copyright

© 2022. The Author(s).

Références

Eur J Hum Genet. 2020 Jun;28(6):697-705
pubmed: 32123329
Big Data. 2019 Sep;7(3):140-162
pubmed: 31033336
Lancet Oncol. 2018 Oct;19(10):1278-1280
pubmed: 30303112
Ir J Med Sci. 2019 Nov;188(4):1129-1135
pubmed: 30734900
Eur J Cancer. 2018 Nov;104:70-80
pubmed: 30336359
Hum Genet. 2018 Aug;137(8):575-582
pubmed: 30069638
Eur J Hum Genet. 2020 Jun;28(6):694
pubmed: 32265564

Auteurs

Jakov Vukovic (J)

Division for Health Informatics and Biostatistics, Croatian Institute of Public Health, Rockefellerova, Street 7, 10 000, Zagreb, Croatia. jakov.vukovic@hzjz.hr.

Damir Ivankovic (D)

Academisch Medisch Centrum Universiteit Van Amsterdam, Meibergdreef 9, 1105, Amsterdam, AZ, Netherlands.

Claudia Habl (C)

Austrian National Public Health Institute, Stubenring 6, 1010, Vienna, Austria.

Jelena Dimnjakovic (J)

Division for Health Informatics and Biostatistics, Croatian Institute of Public Health, Rockefellerova, Street 7, 10 000, Zagreb, Croatia.

Classifications MeSH