Draft:Health Data Sovereignty

  • Comment: Promising draft! The only problem I can find is that the article attempts to walk the user through what Health Data Sovereignty rather than directly getting to the point and explaining. For example in the definition section, the article talk about health, data, sovereignty, then put it all together. See WP:WBA for further information and how you can rewrite parts of the article to fix this. Karnataka (talk) 17:28, 28 June 2023 (UTC)

Health data sovereignty is a concept about the management, ownership and governance of data in a health context. It encompasses aspects of health management, equity, rights, and technology.

Definition edit

What is 'Health'? edit

The World Health Organisation (WHO) defines health as “a state of complete physical, mental, and social well-being and not merely the absence of disease or infirmity”.[1].  This definition has since been the subject of criticism since its inception in 1946[2][3][4][5][6] but is acknowledged as a foundation for building new ways of thinking about health, considering different models for medical, wellness, and environmental viewpoints[7].

Data: not just technology edit

In the context of health data sovereignty, “data” is information about the people's health.  This data may be stored in written form in a hard-copy file at a health centre, hospital, or other institution (e.g., school, prison); it may be specific physical measurements of a person stored in a digitised format as part of an electronic health record (e.g., height, HbA1c levels); or it could be the collective knowledge about a group of people held by an authority (e.g., a parents recall of all their children’s pertussis vaccination status, a community leaders understanding of the proportion of people in their community who have unmet health needs, historical information about a group coded as traditional song).  The concept of data in general is wide and varied so it is useful to consider a formal definition in a health context, one such definition is provided in para. 35 of the General Data Protection Regulation (GDPR) of the European Union (EU):

“Personal data concerning health should include all data pertaining to the health status of a data subject which reveal information relating to the past, current or future physical or mental health status of the data subject. This includes information about the natural person collected in the course of the registration for, or the provision of, health care services as referred to in Directive 2011/24/EU of the European Parliament and of the Council to that natural person; a number, symbol or particular assigned to a natural person to uniquely identify the natural person for health purposes; information derived from the testing or examination of a body part or bodily substance, including from genetic data and biological samples; and any information on, for example, a disease, disability, disease risk, medical history, clinical treatment or the physiological or biomedical state of the data subject independent of its source, for example from a physician or other health professional, a hospital, a medical device or an in vitro diagnostic test.”[8]

Sovereignty: ownership and self-determination edit

Sovereignty as it relates to data is the right that people have to exercise control over information about themselves[9].  This includes ownership, how health data is managed and stored, what it is used for, who has access to it, and how long it is retained.  Having sovereignty over health data includes the power to determine how relevant standards and protocols are defined and applied to management of the data[10].

Within a global context, data sovereignty can be understood as data being subject to the laws of the country or nation where it is stored[11]. However, there may be different perspectives in how data sovereignty is understood, for example, legal frameworks versus rights[12].

History edit

History of health data edit

Early history of health data edit

Health data has been recorded physically for thousands of years. The first known health records are Egyptian medical teaching documents dated around 1500-1700 BC[13][14][15]. Early health records were didactic in form, describing pathology and intended for teaching rather than as a record of treatment[14][16]. Unsystematic recording practice continued with little standardisation until the early eighteenth century when didactic medical records in Europe, following the work of Linnaeus to name and classify organisms, shifted to physician written documents describing the patient as a whole along with their symptoms, diagnoses, treatments, and social setting[14][16]. As medical knowledge expanded in the 19th century, the role of hospitals changed across Europe and North America to being centres for treatment, necessitating the keeping of records of not only care, for use by physicians, but admission and discharge information kept for funding and insurance purposes[14]. This increase in record volume resulted in the creation in the 1850s of the first medical records databases in London and Ontario to improve data storage and access[13].

The early 1900s saw binding and centralising of records along with legislation about the management and storage of records, primarily for insurance and quality improvement use[13][14]. The 1940s gave rise to rules around paper based records, which became the forerunner of those used with computerised health records[14].

Electronic patient records edit

By the early 1970s electronic patient records were entering the health workplace in both the UK and USA[14][17][18], and health professionals had begun to adopt the free sharing of data with health consumers[17]. In the late 2000s the use of electronic health data was widespread in Western nations, although uptake in developing nations lagged due to infrastructure, governance, and technological issues[17][19][20]. By 2011 over 50% of European and US physicians reported having an electronic health record[13][14], by 2016 this number was over 70%[20]. The increased use of electronic health data resulted in the need for digital storage and increased ease of access for health professionals, researchers, and health users alike. Electronic health data records collections now contain quantitative, qualitative, and transactional data[19][21] and are held in fragmented multiple systems, primarily at the point of care, dictated by the purpose of the collection, and by the nature of the organisation collecting the data.

The development of the Web and the internet enabled wider health data sharing[18]. Early forms of health data (e.g., hard copy records, acetate X-rays, cine-films, etc.) had limited access hampered by geography and single-user access constraints, whereas digital forms of health data allowed access across geographic borders, with data being accessible by multiple users simultaneously. This increased accessibility has necessitated regulation and legislation to define who has sovereignty over health data at a national, provider, and individual levels [17][18].

General data sovereignty issues entered mainsteam public consciousness following global surveillance disclosures. Since then sovereignty has generally been considered at the nation-state level[11][12], in contrast to the increasing discussion of Indigenous Data Sovereignty, which acknowledges traditional indigenous nations alongside the concepts of personal and collective sovereignty[12][22].  Health data sovereignty shares principles of Indigenous and general sovereignty, considering where data is stored, which entities manage the data, and how health consumers can interact with and have effective ownership (if not actual control) of their information.  

Major developments edit

Indigenous data sovereignty edit

Indigenous Data Sovereignty aligns to ‘data sovereignty’ but extends to include the social structures of Indigenous peoples[23]. It speaks to the rights of Indigenous peoples to make decisions about the design, collection, ownership, governance, interpretation and use of data about Indigenous peoples, their ways of life, lands and resources[24][25]. This includes agency over how Indigenous health data is collected, stored, used and accessed[26]. Indigenous Data Sovereignty is a movement that emerged from frustrations with poor data practices where non-Indigenous users of data purported to be unbiased and have the authority to speak to Indigenous realities[23]. Indigenous peoples have a history of being subjected to data production aligned to colonial objectives[23][27], but Indigenous peoples have their own histories and traditions of collecting and protecting data that existed pre-European colonisation[23].

The United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP)[28] is an international human rights document setting out minimum standards and rights of Indigenous people around the world, including the affirmation of rights in treaties and other agreements with different States. Articles 3, 4 and 5 speak to the rights of Indigenous peoples to self-determination. Article 31 acknowledges rights of Indigenous peoples to “maintain, control, protect and develop their cultural heritage, traditional knowledge and traditional cultural expressions, as well as the manifestations of their sciences, technologies and cultures”[28] (p. 22). Many of the articles in the declaration can be applied to Indigenous data[29], and as such support Indigenous data sovereignty. Another Indigenous rights instrument that predates UNDRIP is the Mataatua Declaration on Cultural and Intellectual Property Rights of Indigenous Peoples[30] that provides recommendations to Indigenous peoples and member States of the United Nations that align with data sovereignty.

Aotearoa New Zealand: Māori data sovereignty edit

Māori are the Indigenous people of Aotearoa New Zealand. Te Mana Raraunga, the Māori Data Sovereignty Network, defines Māori Data Sovereignty as “the inherent rights and interests that Māori have in relation to the collection, ownership, and application of Māori data”[31]. Māori Data Sovereignty principles have been defined by Te Mana Raraunga[31]. Within an Aotearoa New Zealand health context, He Korowai Oranga lays out a Māori health strategy to guide the government and disability sector “to achieve the best health outcomes for Māori” in New Zealand[32]. It is implemented through a Māori health action plan that includes the development and implementation of a Māori data sovereignty approach in partnership with Māori[33]. For example, the New Zealand Government through a number of its agencies has partnered with the Data Iwi Leaders Group to provide an avenue for Māori individuals to link their iwi affiliations with their National Health Index number to improve and inform “datasets about iwi, for iwi”[34].

Australia: Aboriginal and Torres Strait Islander data sovereignty edit

In Australia, the Maiam nayri Wingara principles[35] assert the rights of Aboriginal and Torres Strait Islander peoples to access, control, collection, analysis, stewardship and dissemination of data in ways that are meaningful and relevant that enhance self-governance and self-determination, and the right to not participate in processes deemed to be inconsistent with these principles[36].

Canada: First Nations data sovereignty principles edit

Indigenous data sovereignty concerns were initially voiced by Canadian First Nations communities in 1995 in relation to rights over health survey data collected by the government in First Nations communities. This led to the development of a model known as OCAP®[23] that has been built on First Nations principles of ownership, control, access and possession[37].

Technology edit

Changes in technology both enable and complicate health data sovereignty.

Consumer access edit

Consumer devices, including smartphones and wearable devices such as Fitbits or Apple Watches, have increased the immediacy and volume of health information and consumer expectations of access to, and control over, health data[38]. Health information storage and sharing models through Apple Health and others have opened up possibilities for more granular information sharing between consumers, and expectations for direct access to health information[39]. The development of patient portals linked to healthcare providers has also increased direct consumer access to information about their care.

Cloud computing edit

Modern computing loads, including health systems, have increasingly moved towards the cloud during the 21st century. Many of these services are run by multi-national companies with servers in multiple locations. Due to this, it is increasingly difficult to determine which jurisdictions specific data is held in or transferred through. This is a complicating factor for national sovereignty over data[40].

Distributed ledgers edit

Blockchain technology offers some options for decentralising how data is stored.  Such distributed ledger technology can be designed with rules that specify how an authority (e.g. tribal leadership) deems how Private- and/or Consortium-blockchains should be managed[41][22].  Depending on how a blockchain is designed and built, users could also have the option to control who their health data is shared with and monetise it by allowing researchers access for specific purposes[42][43].

Implications and impacts edit

Impacts on provision of care edit

Individual health data sovereignty enables data to follow the patient, and to be shared with their consent; it also enables self-care and community care[44]. A decentralised model of health data sovereignty also enables communities to have the data to support their own health needs.

This model of individual and community data ownership can clash with efforts to improve data availability for clinicians. Findable, accessible, interoperable, reusable (FAIR) data principles have been criticised for separating the use of data from the individuals and communities that they are about[45].

Legal implications edit

The legal aspects of data sovereignty in healthcare vary from country to country, although there are similarities[46]. Data covered by this includes individuals' personal health information, such as electronic health records, test or intervention results, and genetic data. When personal health information is shared or transferred, there is ambiguity regarding consent practices in different jurisdictions at the point where the data is created, such as hospitals or healthcare centres[46]. This means that patients may or may not have consented to share their health data. Appropriate regulations and practices can ensure that the privacy and sovereignty of health data are protected and that people have control over sharing their health information.

Legislation around health data sovereignty is directed by different national approaches. Examples of this are the 2016 GDPR legislation enacted by the European Union, which gives citizens the right to be forgotten, and to control what data is collected and how it is used. A different approach is that of the 1996 HIPAA and 2009 HITECH legislation enacted by the USA, which has a strong privacy focus but allows the individual little say over how data is governed and used following collection. Debate continues around the ownership of privately collected health data however nationally collected data is usually covered by digital and privacy legislation.

Research and monetisation edit

National, Indigenous, and individual sovereignty over health data introduces complexities for centralised or commercial biomedical and public health research[47]. It also opens up opportunities for individuals and communities to participate more actively and benefit more directly from research, including through monetisation.

Data monetisation is the process of using data to obtain an economic benefit. Organisations can monetise their data by providing data access to third parties, (direct monetisation), or by using analytics to derive insights from data to improve internal processes, products, and services (indirect monetisation)[48]. The monetisation of health data means obtaining economic value from health-related information. Health data, including electronic health records, genetics, biometric measurements and lifestyle information, can provide valuable insights to stakeholders such as researchers, medical providers, pharmaceutical companies and technology companies[49].

Companies can use health data to identify promising targets for drug research or evaluate the efficacy and safety of new treatments, e.g., Geisinger Health System's Data-Driven Medicine Initiative. Geisinger partnered with Regeneron Pharmaceuticals to sequence its patients' DNA and use the genetic data to identify individuals who could participate in clinical trials of new drugs. In this example, strict privacy and informed consent controls were implemented to ensure data sovereignty and protect patient privacy[50].

Setting up platforms for data as a service, selling data for performance benchmarking, and developing specialised solutions through partnerships are other innovative ways of monetising healthcare data[51]. These strategies have the potential to revolutionise the healthcare industry by improving patient care, reducing costs and facilitating the development of innovative drugs and therapies that would benefit many people.

Data sovereignty and monetisation are interconnected concepts in the digital environment. Data sovereignty empowers individuals and organisations to have control over their data, while data monetisation enables economic value generation from data assets. Monetising data offers opportunities for research, innovation, and improved services[52]. However, it must be carried out responsibly to respect legal regulations and ethical principles, protect privacy, ensure transparency, and promote trust among individuals and organisations, which is the aim of data sovereignty[53].

Challenges, Issues and Barriers edit

Economic edit

The effective storage and management of health data (both physical and digital) relies on the presence of stable infrastructure[54]. Where there is a deficit in the provision of basic human needs or instability in governance and political systems, health data sovereignty may not be practical, achievable, and a priority for citizens, health providers, and government agencies. Where a nation does not prioritise spending on health digital technologies, progressing the objectives of health data sovereignty is unlikely to be achieved. Additionally, the storage and management of digital health data may present unsustainable economic costs over time due to expanding data volumes. In mid-2020 it was estimated that the quantity of global health data storage was approximately 2,300 exabytes, with volumes growing at 48% annually[55].

Technology edit

Fragmented and non-uniform collection of health data into disparate non-interoperable technologies impedes availability, access and assertions over health data, limiting the enacting of health data sovereignty principles[56]. Greater health data access has resulted in challenges balancing rights over health data sovereignty with security requirements. The digitising of health data and rapid expansion of internet connected devices accessing this data has increased the attack surface, allowing exploitation by bad cyberactors[57][58]. Healthcare data cyberattacks in the USA cost USD$21 billion in 2020[59], with healthcare data breaches in the USA doubling between 2019 and 2022[60].

Political edit

Political systems dictate how health data sovereignty is prioritised and enacted. Health data is recognised by governments as an asset that can be shared or withheld in response to political ideation or global politics[61]. Governing bodies may not provide citizens with rights to health data access or may act against health data sovereignty for certain population groups.

Future edit

Health Data Sovereignty intersects with several domains, most notably digital technology. Efforts are either planned or underway to create nationally-accessible electronic health records[62][63][43].  Enabling access to digital sources for health data opens up possibilities for research and monetisation.  Recent legislative moves and regulations such as the GDPR (EU), HIPAA (US), and HIPC (NZ) attempt to provide some level of consumer protection although these are not always successful in preventing the use of big data for commercial benefits[64]

Widespread digitisation has led to understanding health consumers as “sovereign patients” who wish to be involved in decisions about how their health information is used.  Future developments in Health Data Sovereignty are likely to include further app-based developments to increasingly enable people to view information on mobile devices, based on extensible technology standards and specialised health communication protocols, including Fast Healthcare Interoperability Resources (FHIR) and GDPR-compliant tools to record informed consent.[46][62]

The related field of Indigenous Data Sovereignty will likely lead to opportunities for self-determination that align with values of Indigenous peoples and frameworks that support diverse views of health data. Such views are especially important for all population groups who have been researched without the ability to control how data about them has subsequently been used.

References edit

  1. ^ Grad, Frank P. (2002). "The Preamble of the Constitution of the World Health Organization". Bulletin of the World Health Organization. 80 (12): 981–984. ISSN 0042-9686. PMC 2567708. PMID 12571728.
  2. ^ Callahan, Daniel (1973). "The WHO Definition of 'Health'". The Hastings Center Studies. 1 (3): 77–87. doi:10.2307/3527467. JSTOR 3527467. PMID 4607284.
  3. ^ Gillon, R (1986-02-01). "On sickness and on health". BMJ. 292 (6516): 318–320. doi:10.1136/bmj.292.6516.318. ISSN 0959-8138. PMC 1339285. PMID 3080152.
  4. ^ Nobile, Marianna (2014). "The WHO Definition of Health: A Critical Reading". Medicine & Law. 33 (2): 33–40. PMID 27359006 – via HeinOnline.
  5. ^ Saracci, R. (1997-05-10). "The world health organisation needs to reconsider its definition of health". BMJ. 314 (7091): 1409–1410. doi:10.1136/bmj.314.7091.1409. ISSN 0959-8138. PMC 2126653. PMID 9161320.
  6. ^ Charlier, P.; Coppens, Y.; Malaurie, J.; Brun, L.; Kepanga, M.; Hoang-Opermann, V.; Correa Calfin, J.A.; Nuku, G.; Ushiga, M.; Schor, X.E.; Deo, S.; Hassin, J.; Hervé, C. (2017). "A new definition of health? An open letter of autochthonous peoples and medical anthropologists to the WHO". European Journal of Internal Medicine. 37: 33–37. doi:10.1016/j.ejim.2016.06.027. PMID 27394926.
  7. ^ Larson, James S. (1999). "The Conceptualization of Health". Medical Care Research and Review. 56 (2): 123–136. doi:10.1177/107755879905600201. ISSN 1077-5587. PMID 10373720. S2CID 34215327.
  8. ^ Regulation (EU) 2016/679. On the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). European Parliament and Council. https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679
  9. ^ Reyes-García, Victoria; Tofighi-Niaki, Adrien; Austin, Beau J; Benyei, Petra; Danielsen, Finn; Fernández-Llamazares, Álvaro; Sharma, Aditi; Soleymani-Fard, Ramin; Tengö, Maria (2022-06-20). "Data Sovereignty in Community-Based Environmental Monitoring: Toward Equitable Environmental Data Governance". BioScience. 72 (8): 714–717. doi:10.1093/biosci/biac048. ISSN 0006-3568. PMC 9343228. PMID 35923191.
  10. ^ Floridi, Luciano (2020). "The Fight for Digital Sovereignty: What It Is, and Why It Matters, Especially for the EU". Philosophy & Technology. 33 (3): 369–378. doi:10.1007/s13347-020-00423-6. ISSN 2210-5433. PMC 8848320. PMID 35194548.
  11. ^ a b "Te Mana Raraunga". Te Mana Raraunga. 2022-07-11. Retrieved 2023-05-27.
  12. ^ a b c Hummel, Patrik; Braun, Matthias; Tretter, Max; Dabrock, Peter (2021). "Data sovereignty: A review". Big Data & Society. 8 (1): 205395172098201. doi:10.1177/2053951720982012. ISSN 2053-9517. S2CID 234271644.
  13. ^ a b c d Lorkowski, Jacek; Pokorski, Mieczyslaw (2022-10-17). "Medical Records: A Historical Narrative". Biomedicines. 10 (10): 2594. doi:10.3390/biomedicines10102594. ISSN 2227-9059. PMC 9599146. PMID 36289856.
  14. ^ a b c d e f g h Gillum, Richard F. (2013). "From Papyrus to the Electronic Tablet: A Brief History of the Clinical Medical Record with Lessons for the Digital Age". The American Journal of Medicine. 126 (10): 853–857. doi:10.1016/j.amjmed.2013.03.024. PMID 24054954.
  15. ^ Al-Awqati, Qais (2006). "How to write a case report: lessons from 1600 B.C." Kidney International. 69 (12): 2113–2114. doi:10.1038/sj.ki.5001592. PMID 16761021.
  16. ^ a b Dalianis, Hercules (2018), "The History of the Patient Record and the Paper Record", Clinical Text Mining, Cham: Springer International Publishing, pp. 5–12, doi:10.1007/978-3-319-78503-5_2, ISBN 978-3-319-78502-8, retrieved 2023-05-27
  17. ^ a b c d McMillan, Brian; Eastham, Robert; Brown, Benjamin; Fitton, Richard; Dickinson, David (2018-12-19). "Primary Care Patient Records in the United Kingdom: Past, Present, and Future Research Priorities". Journal of Medical Internet Research. 20 (12): e11293. doi:10.2196/11293. ISSN 1438-8871. PMC 6315263. PMID 30567695.
  18. ^ a b c Berner, E. S. (2004-10-18). "Will the Wave Finally Break? A Brief View of the Adoption of Electronic Medical Records in the United States". Journal of the American Medical Informatics Association. 12 (1): 3–7. doi:10.1197/jamia.m1664. ISSN 1067-5027. PMC 543824. PMID 15492029.
  19. ^ a b Murdoch, Travis B.; Detsky, Allan S. (2013-04-03). "The Inevitable Application of Big Data to Health Care". JAMA. 309 (13): 1351–1352. doi:10.1001/jama.2013.393. ISSN 0098-7484. PMID 23549579. S2CID 20462354.
  20. ^ a b Honavar, SantoshG (2020). "Electronic medical records – The good, the bad and the ugly". Indian Journal of Ophthalmology. 68 (3): 417–418. doi:10.4103/ijo.IJO_278_20. ISSN 0301-4738. PMC 7043175. PMID 32056991.
  21. ^ Cáceres, Sigfrido Burgos (2013). "Electronic health records: beyond the digitization of medical files". Clinics. 68 (8): 1077–1078. doi:10.6061/clinics/2013(08)02. PMC 3752637. PMID 24037000.
  22. ^ a b Calzada, Igor (2021). "Data Co-Operatives through Data Sovereignty". Smart Cities. 4 (3): 1158–1172. doi:10.3390/smartcities4030062. ISSN 2624-6511.
  23. ^ a b c d e Lovett, Raymond; Lee, Vanessa; Kukutai, Tahu; Cormack, Donna; Rainie, Stephanie C; Walker, Jennifer (2019). "Good data practices for Indigenous data sovereignty and governance". In Daly, Angela; Devitt, S. Kate; Mann, Monique (eds.). Good data. Amsterdam: Institute of Network Cultures. pp. 26–36. ISBN 978-94-92302-27-4.
  24. ^ Kukutai, Tahu; Taylor, J (2016). "Data sovereignty for Indigenous Peoples: current practice and future needs". In Kukutai, Tahu; Taylor, J (eds.). Indigenous Data Sovereignty: Towards an agenda (PDF). ANU Press. pp. 1–25. ISBN 9781760460310.
  25. ^ Garrison, Nanibaa’ A.; Hudson, Māui; Ballantyne, Leah L.; Garba, Ibrahim; Martinez, Andrew; Taualii, Maile; Arbour, Laura; Caron, Nadine R.; Rainie, Stephanie Carroll (2019-08-31). "Genomic Research Through an Indigenous Lens: Understanding the Expectations". Annual Review of Genomics and Human Genetics. 20 (1): 495–517. doi:10.1146/annurev-genom-083118-015434. ISSN 1527-8204. PMID 30892943. S2CID 84844220.
  26. ^ Hendl, Tereza; Roxanne, Tiara (2022). "Digital surveillance in a pandemic response: What bioethics ought to learn from Indigenous perspectives". Bioethics. 36 (3): 305–312. doi:10.1111/bioe.13013. ISSN 0269-9702. PMID 35180324. S2CID 246974929.
  27. ^ Pihama, Leonie (2019), "Colonization and the Importation of Ideologies of Race, Gender, and Class in Aotearoa", Handbook of Indigenous Education, Singapore: Springer Singapore, pp. 29–48, doi:10.1007/978-981-10-3899-0_56, ISBN 978-981-10-3898-3, retrieved 2023-05-28
  28. ^ a b "United Nations Declaration on the Rights of Indigenous Peoples" (PDF).
  29. ^ Karaitiana (2022-02-13). "Compendium of Māori Data Sovereignty VERSION 2". Dr Karaitiana Taiuru PhD, JP, ACG, MInstD, RSNZ. Retrieved 2023-05-27.
  30. ^ Commission on Human Rights Sub-Commission of Prevention of Discrimination and Protection of Minorities Working Group on Indigenous Populations (1993). "The Mataatua Declaration on Cultural and Intellectual Property Rights of Indigenous Peoples" (PDF). Whakatane, Aotearoa New Zealand.
  31. ^ a b "Te Mana Raraunga - Principles of Māori Data Sovereignty" (PDF). Te Mana Raraunga | Māori Data Sovereignty Network. 2018.
  32. ^ "He Korowai Oranga". Ministry of Health NZ. Retrieved 2023-05-27.
  33. ^ "Whakamaua: Māori health action plan 2020-2025" (PDF). Ministry of Health. 2020.
  34. ^ "Tātai - Share your iwi".
  35. ^ "Indigenous Data Sovereignty Summit" (PDF). Canberra, ACT. 2018-06-20.
  36. ^ "Maiam nayri Wingara principles". Maiam nayri Wingara and Australian Indigenous Governance Institute. 2018.
  37. ^ "First Nations Information Goverance Centre".
  38. ^ Harmon, Shawn H. E. (2022), Corrales Compagnucci, Marcelo; Fenwick, Mark; Wilson, Michael Lowery; Forgó, Nikolaus (eds.), "Health Research, eHealth, and Learning Healthcare Systems: Key Approaches, Shortcomings, and Design Issues in Data Governance", AI in eHealth: Human Autonomy, Data Governance and Privacy in Healthcare, Cambridge Bioethics and Law, Cambridge: Cambridge University Press, pp. 423–450, doi:10.1017/9781108921923.021, ISBN 978-1-108-83096-6, retrieved 2023-05-28
  39. ^ Mamlin, Burke W.; Tierney, William M. (2016). "The Promise of Information and Communication Technology in Healthcare: Extracting Value From the Chaos". The American Journal of the Medical Sciences. 351 (1): 59–68. doi:10.1016/j.amjms.2015.10.015. ISSN 0002-9629. PMID 26802759. S2CID 23254163.
  40. ^ Alami, Hassane; Gagnon, Marie-Pierre; Fortin, Jean-Paul (2016). "Telehealth in Light of Cloud Computing: Clinical, Technological, Regulatory and Policy Issues". Journal of the International Society for Telemedicine and EHealth. 4: e5 (1–7). ISSN 2308-0310.
  41. ^ Mackey, Tim K.; Calac, Alec J.; Chenna Keshava, B S; Yracheta, Joseph; Tsosie, Krystal S.; Fox, Keolu (2022). "Establishing a blockchain-enabled Indigenous data sovereignty framework for genomic data". Cell. 185 (15): 2626–2631. doi:10.1016/j.cell.2022.06.030. PMID 35868267. S2CID 250722214.
  42. ^ Roberts, Bryn; Edelmann, Simone (2021-12-08). "The possibilities and pitfalls of monetizing healthcare data". Healthcare Transformers. Retrieved 2023-05-27.
  43. ^ a b Schinle, Markus; Erler, Christina; Stork, Wilhelm (2021-01-05). Data Sovereignty in Data Donation Cycles - Requirements and Enabling Technologies for the Data-driven Development of Health Applications. University of Hawai'i at Manoa, Hamilton Library. hdl:10125/71098. ISBN 978-0-9981331-4-0.
  44. ^ Ecks *, Stefan (2004). "Bodily sovereignty as political sovereignty: 'self‐care' in Kolkata, India". Anthropology & Medicine. 11 (1): 75–89. doi:10.1080/1364847042000204906. ISSN 1364-8470. PMID 26868100. S2CID 214614565.
  45. ^ Ryder, Courtney; Wilson, Roland; D’Angelo, Shane; O’Reilly, Gerard M.; Mitra, Biswadev; Hunter, Kate; Kim, Yen; Rushworth, Nick; Tee, Jin; Hendrie, Delia; Fitzgerald, Mark C.; Curtis, Kate (2022). "Indigenous Data Sovereignty and Governance: The Australian Traumatic Brain Injury National Data Project". Nature Medicine. 28 (5): 888–889. doi:10.1038/s41591-022-01774-7. ISSN 1546-170X. PMID 35440783. S2CID 248263992.
  46. ^ a b c "Connected Health: Empowering Health Through Interoperability" (PDF). Global Digital Health Partnership. 2019.
  47. ^ Beaton, Angela; Hudson, Maui; Milne, Moe; Port, Ramari Viola; Russell, Khyla; Smith, Barry; Toki, Valmaine; Uerata, Lynley; Wilcox, Phillip; Bartholomew, Karen; Wihongi, Helen (March 2017). "Engaging Māori in biobanking and genomic research: a model for biobanks to guide culturally informed governance, operational, and community engagement activities". Genetics in Medicine. 19 (3): 345–351. doi:10.1038/gim.2016.111. ISSN 1098-3600. PMID 27632687. S2CID 24470297.
  48. ^ Firouzi, Farshad; Farahani, Bahar; Barzegari, Mojtaba; Daneshmand, Mahmoud (2022). "AI-Driven Data Monetization: The Other Face of Data in IoT-Based Smart and Connected Health". IEEE Internet of Things Journal. 9 (8): 5581–5599. doi:10.1109/JIOT.2020.3027971. ISSN 2327-4662. S2CID 226424893.
  49. ^ Busch-Casler, Julia; Radic, Marija (2022). "Personal Data Markets: A Narrative Review on Influence Factors of the Price of Personal Data". In Guizzardi, Renata; Ralyté, Jolita; Franch, Xavier (eds.). Research Challenges in Information Science. Lecture Notes in Business Information Processing. Vol. 446. Cham: Springer International Publishing. pp. 3–19. doi:10.1007/978-3-031-05760-1_1. ISBN 978-3-031-05760-1.
  50. ^ Carey, David J.; Fetterolf, Samantha N.; Davis, F. Daniel; Faucett, William A.; Kirchner, H. Lester; Mirshahi, Uyenlinh; Murray, Michael F.; Smelser, Diane T.; Gerhard, Glenn S.; Ledbetter, David H. (2016). "The Geisinger MyCode community health initiative: an electronic health record–linked biobank for precision medicine research". Genetics in Medicine. 18 (9): 906–913. doi:10.1038/gim.2015.187. ISSN 1098-3600. PMC 4981567. PMID 26866580.
  51. ^ Ettorchi-Tardy, Amina; Levif, Marie; Michel, Philippe (2012). "Benchmarking: A Method for Continuous Quality Improvement in Health". Healthcare Policy. 7 (4): e101–e119. ISSN 1715-6572. PMC 3359088. PMID 23634166.
  52. ^ Tang, Chunlei; Plasek, Joseph M.; Zhu, Yangyong; Huang, Yajun (2020-12-16). "Data sovereigns for the world economy". Humanities and Social Sciences Communications. 7 (1): 1–4. doi:10.1057/s41599-020-00664-y. ISSN 2662-9992. S2CID 257086711.
  53. ^ Smith, Tim; Nelson, Josh; Jurek, Tony; Schute, Emily (2018). "Enterprise data sovereignty in life sciences and health care: A new model of sharing for stewards of health information" (PDF). Tech Trends 2018 | A life sciences and health care perspective. Deloitte.
  54. ^ Dash, Sabyasachi; Shakyawar, Sushil Kumar; Sharma, Mohit; Kaushik, Sandeep (2019-06-19). "Big data in healthcare: management, analysis and future prospects". Journal of Big Data. 6 (1): 54. doi:10.1186/s40537-019-0217-0. ISSN 2196-1115. S2CID 256408780.
  55. ^ "On the way to the moon: From the first digital X-ray images to the digital assistance". www.medmuseum.siemens-healthineers.com. Discover (hi)stories. Retrieved 2023-05-27.
  56. ^ Berner, E. S. (2004-10-18). "Will the Wave Finally Break? A Brief View of the Adoption of Electronic Medical Records in the United States". Journal of the American Medical Informatics Association. 12 (1): 3–7. doi:10.1197/jamia.m1664. ISSN 1067-5027. PMC 543824. PMID 15492029.
  57. ^ Kiser, S; Maniam, B (2021). "Ransomware: Healthcare industry at risk". Journal of Business and Accounting. 14 (1): 64–81.
  58. ^ Neprash, Hannah T.; McGlave, Claire C.; Cross, Dori A.; Virnig, Beth A.; Puskarich, Michael A.; Huling, Jared D.; Rozenshtein, Alan Z.; Nikpay, Sayeh S. (2022-12-29). "Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021". JAMA Health Forum. 3 (12): e224873. doi:10.1001/jamahealthforum.2022.4873. ISSN 2689-0186. PMC 9856685. PMID 36580326.
  59. ^ "The growing threat of ransomware attacks on hospitals". AAMC. Retrieved 2023-05-28.
  60. ^ Office of Information Security; Health Sector Cybersecurity Coordination Center (2023-09-23). "2022 Healthcare Cybersecurity Year in Review, and a 2023 Look-Ahead" (PDF).
  61. ^ Liu, Lizhi (2021-03-01). "The Rise of Data Politics: Digital China and the World". Studies in Comparative International Development. 56 (1): 45–67. doi:10.1007/s12116-021-09319-8. ISSN 1936-6167. PMC 7976668. PMID 33758435.
  62. ^ a b Appenzeller, Arno; Rode, Ewald; Krempel, Erik; Beyerer, Jürgen (2020-06-30). "Enabling data sovereignty for patients through digital consent enforcement". Proceedings of the 13th ACM International Conference on PErvasive Technologies Related to Assistive Environments. PETRA '20. New York, NY, USA: Association for Computing Machinery. pp. 1–4. doi:10.1145/3389189.3393745. ISBN 978-1-4503-7773-7. S2CID 220252717.
  63. ^ Dobson, Rosie; Baty, Chris; Best, Georgia; Wells, Susan; Wang, Keming; Hallett, Karen; Andrew, Penny; Whittaker, Robyn (2022-06-10). "Digital solutions for providing patients access to hospital-held health information: what are the design issues that need to be addressed?" (PDF). New Zealand Medical Journal | te Ara Tika O te Hauora Hapori. 135 (1556): 114–23. ISSN 1175-8716.
  64. ^ Mueller, Ryan (2022-10-01). "Big Data, Big Gap: Working Towards a HIPAA Framework that Covers Big Data". 97 Indiana Law Journal 1505 (2022). 97 (4). ISSN 0019-6665.