CoChat
Sign Up
Cited by 27Mobile Health and mHealth ApplicationsThoreau and American LiteraturePrivacy, Security, and Data Protection

Mobile Health Systems for Community-Based Primary Care: Identifying Controls and Mitigating Privacy Threats

Open access
Iwaya, Leonardo Horn, Fischer-Hübner, Simone, Åhlfeldt, Rose-Mharie, Martucci, Leonardo A·2019·JMIR mHealth and uHealth
DOI 10.2196/11642PMC PMC6446152

Published version of a preprint

Open this paper in CoChat — free accountOpen PDF

Abstract

BACKGROUND: Community-based primary care focuses on health promotion, awareness raising, and illnesses treatment and prevention in individuals, groups, and communities. Community Health Workers (CHWs) are the leading actors in such programs, helping to bridge the gap between the population and the health system. Many mobile health (mHealth) initiatives have been undertaken to empower CHWs and improve the data collection process in the primary care, replacing archaic paper-based approaches. A special category of mHealth apps, known as mHealth Data Collection Systems (MDCSs), is often used for such tasks. These systems process highly sensitive personal health data of entire communities so that a careful consideration about privacy is paramount for any successful deployment. However, the mHealth literature still lacks methodologically rigorous analyses for privacy and data protection. OBJECTIVE: In this paper, a Privacy Impact Assessment (PIA) for MDCSs is presented, providing a systematic identification and evaluation of potential privacy risks, particularly emphasizing controls and mitigation strategies to handle negative privacy impacts. METHODS: The privacy analysis follows a systematic methodology for PIAs. As a case study, we adopt the GeoHealth system, a large-scale MDCS used by CHWs in the Family Health Strategy, the Brazilian program for delivering community-based primary care. All the PIA steps were taken on the basis of discussions among the researchers (privacy and security experts). The identification of threats and controls was decided particularly on the basis of literature reviews and working group meetings among the group. Moreover, we also received feedback from specialists in primary care and software developers of other similar MDCSs in Brazil. RESULTS: The GeoHealth PIA is based on 8 Privacy Principles and 26 Privacy Targets derived from the European General Data Protection Regulation. Associated with that, 22 threat groups with a total of 97 subthreats and 41 recommended controls were identified. Among the main findings, we observed that privacy principles can be enhanced on existing MDCSs with controls for managing consent, transparency, intervenability, and data minimization. CONCLUSIONS: Although there has been significant research that deals with data security issues, attention to privacy in its multiple dimensions is still lacking for MDCSs in general. New systems have the opportunity to incorporate privacy and data protection by design. Existing systems will have to address their privacy issues to comply with new and upcoming data protection regulations. However, further research is still needed to identify feasible and cost-effective solutions.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.2196/11642

Cites

3 of 3 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • One study focused solely on the privacy of mHealth apps by applying the Privacy Impact Assessment (PIA) framework.

    “While one study focused solely on the privacy of mHealth apps by applying the Privacy Impact Assessment (PIA) framework [90], the remainder targeted both security and privacy at the same time.”

    From Security and Privacy of mHealth Applications: A Scoping Review (2020) · cites this paper as [90]

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 23

  1. [2]Pencarrick HC Meagher N McGrail KM Privacy by design at population data BC: a case study describing the technical, administrative, and physical controls for privacy-sensitive secondary use of personal information for research in the public interest J Am Med Inform Assoc 2013 01 01 20 1 25 8 10.1136/amiajnl-2012-001011 22935136 amiajnl-2012-001011 22935136 PMC3555322 · DOI
  2. [3]Sá JH Rebelo MS Brentani A Grisi SJ Iwaya LH Simplício MA Carvalho TC Gutierrez MA Georeferenced and secure mobile health system for large scale data collection in primary care Int J Med Inform 2016 12 94 91 9 10.1016/j.ijmedinf.2016.06.013 27573316 S1386-5056(16)30142-3 27573316 · DOI
  3. [4]Schoen J Mallett JW Grossman-Kahn R Brentani A Kaselitz E Heisler M Perspectives and experiences of community health workers in Brazilian primary care centers using m-health tools in home visits with community members Hum Resour Health 2017 09 29 15 1 71 10.1186/s12960-017-0245-9 28962569 10.1186/s12960-017-0245-9 28962569 PMC5622566 · DOI · Paper page
  4. [5]Crowe A Taking Privacy and Data Protection Seriously in M4D Initiatives Proceedings of the 4th International Conference on M4D Mobile Communication for Development: M4D 2014, General Tracks 2014 International Conference on M4D Mobile Communication for Development April 7-9, 2016 Dakar, Senegal Karlstad University Studies
  5. [7]Gejibo S Mancini F Mughal K Sasan A Mobile data collection: a security perspective Mobile Health: A Technology Road Map 2015 Switzerland Springer, Cham 1015 1042
  6. [8]Simplício MA Iwaya LH Barros BM Carvalho TC Näslund M SecourHealth: a delay-tolerant security framework for mobile health data collection IEEE Biomed Health Inform 2015 19 2 761 72 10.1109/JBHI.2014.2320444 24801629 24801629 · DOI
  7. [9]Cobb C Sudar S Reiter N Anderson R Roesner F Kohno T Computer security for data collection technologies Dev Eng 2018 3 1 11 10.1016/j.deveng.2017.12.002 30555887 PMC6277821 · DOI
  8. [11]Gangadharan SP The downside of digital inclusion: expectations and experiences of privacy and surveillance among marginal Internet users New Media Soc 2015 11 09 19 4 597 615 10.1177/1461444815614053 · DOI
  9. [14]Clarke R An evaluation of privacy impact assessment guidance documents International Data Privacy Law 2011 02 15 1 2 111 20 10.1093/idpl/ipr002 · DOI
  10. [15]Clarke R Privacy impact assessment: its origins and development Comput Law Secur Rev 2009 1 25 2 123 35 10.1016/j.clsr.2009.02.002 · DOI · Paper page
  11. [17]Oetzel MC Spiekermann S A systematic methodology for privacy impact assessments: a design science approach Eur J Inf Syst 2013 7 23 23 2 126 50 10.1057/ejis.2013.18 · DOI
  12. [20]Iwaya LH Gomes MA Simplício MA Carvalho TC Dominicini CK Sakuragui RR Rebelo MS Gutierrez MA Näslund M Håkansson P Mobile health in emerging countries: a survey of research initiatives in Brazil Int J Med Inform 2013 05 82 5 283 98 10.1016/j.ijmedinf.2013.01.003 23410658 S1386-5056(13)00014-2 23410658 · DOI · Paper page
  13. [21]Shao D Malmö University 2018 A proposal of a mobile health data collection and reporting system for the developing world http://hdl.handle.net/2043/13936
  14. [23]LeFevre AE Mohan D Hutchful D Jennings L Mehl G Labrique A Romano K Moorthy A Mobile Technology for Community Health in Ghana: what happens when technical functionality threatens the effectiveness of digital health programs? BMC Med Inform Decis Mak 2017 12 14 17 1 27 10.1186/s12911-017-0421-9 28292288 10.1186/s12911-017-0421-9 28292288 PMC5351254 · DOI
  15. [25]Anokwa Y Hartung C Brunette W Borriello G Lerer A Open source data collection in the developing world Computer 2009 10 42 10 97 9 10.1109/MC.2009.328 · DOI
  16. [27]Macinko J Harris MJ Brazil's family health strategy--delivering community-based primary care in a universal health system N Engl J Med 2015 06 04 372 23 2177 81 10.1056/NEJMp1501140 26039598 26039598 · DOI
  17. [28]Correia R Kon F Kon R Borboleta: A mobile telehealth system for primary homecare 2008 ACM symposium on Applied computing Mar 16-20, 2008 Fortaleza, Ceará 1343 7 10.1145/1363686.1363998 · DOI
  18. [29]Sá JH Rebelo M Brentani A Grisi S Gutierrez MA GeoHealth: a georeferenced system for health data analysis in primary care IEEE Latin Am Trans 2012 01 10 1 1352 6 10.1109/TLA.2012.6142483 · DOI
  19. [36]Wright D The state of the art in privacy impact assessment Comput Law Secur Rev 2012 2 28 1 54 61 10.1016/j.clsr.2011.11.007 25904163 · DOI · Paper page
  20. [38]Iwaya LH Fischer-Hübner S Åhlfeldt RM Martucci L mHealth: a Privacy Threat Analysis for Public Health Surveillance Systems IEEE 31st International Symposium on Computer-Based Medical Systems (CBMS) 2018 International Symposium on Computer-Based Medical Systems (CBMS) 18-21 June, 2018 Karlstad, Sweden 10.1109/CBMS.2018.00015 · DOI
  21. [43]Kotz D A threat taxonomy for mHealth privacy 2011 International Conference on Communication Systems and Networks (COMSNETS) 4-8 Jan, 2011 Bangalore, India 1 6 10.1109/COMSNETS.2011.5716518 · DOI · Paper page
  22. [44]Rexhepi H Åhlfeldt RM Cajander Å Huvila I Cancer patients' attitudes and experiences of online access to their electronic medical records: A qualitative study Health Informatics J 2016 07 19 10.1177/1460458216658778 27440056 1460458216658778 27440056 · DOI
  23. [45]Murmann P Fischer-Hübner S Tools for achieving usable ex post transparency: a survey IEEE Access 2017 10 23 5 22965 91 10.1109/ACCESS.2017.2765539 · DOI

Cited by

Sorted by citations

Authors
Iwaya, L. H., Fischer-Hübner, S., Åhlfeldt, R.-M., & Martucci, L. A.
Affiliations
  • Karlstad University (SE)
  • University of Skövde (SE)
Corresponding author
Iwaya, Leonardo Horn
ORCID
Venue
JMIR mHealth and uHealth
Publisher
JMIR Publications Inc.
Published
2019-03-20
Volume
7
Issue
3
Pages
e11642
ISSN
2291-5222 (ISSN-L)
DOI
10.2196/11642
PMC
PMC6446152
OpenAlex
W2907113209
Cited by
27
References
3
Citations by year
2026: 4 · 2025: 1 · 2024: 4 · 2023: 6 · 2022: 4 · 2021: 2 · 2020: 5 · 2019: 1
FWCI
3.05
Type
journal article
Language
en
Open access
Licence
cc-by
Locations
  • JMIR mhealth and uhealth (publishedVersion, cc-by)
  • PubMed Central (publishedVersion, cc-by)
  • PubMed (publishedVersion)
  • Diva portal (Dalarna University Library) (submittedVersion, other-oa)
  • Digitala vetenskapliga arkivet (Diva) (Karlstad University) (submittedVersion, other-oa)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Funders
  • Karlstads universitet
  • Stiftelsen för Strategisk Forskning
Topics
  • Health Sciences › Health Professions › General Health Professions › Mobile Health and mHealth Applications
  • Physical Sciences › Computer Science › Information Systems › Thoreau and American Literature
  • Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
Keywords
privacy impact assessment, community health workers, community-based primary care, GeoHealth, Family Health Strategy, privacy control, data protection by design, General Data Protection Regulation, data minimization, consent management, transparency
MeSH terms
Brazil, Confidentiality, Data Collection, Government Programs, Humans, Primary Health Care, Computer Security, Telemedicine, Mobile Applications

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review