'It’s not something you can take in your hands'. Swiss experts’ perspectives on health data ownership: an interview-based study

A reference architecture for personal health data spaces using decentralized content-addressable storage networks

Introduction

This paper addresses the dilemmas of accessibility, comprehensiveness, and ownership related to health data. To resolve these dilemmas, we propose and justify a novel, globally scalable reference architecture for a Personal Health Data Space (PHDS). This architecture leverages decentralized content-addressable storage (DCAS) networks, ensuring that the data subject retains complete control and ownership of their personal health data. In today's globalized world, where people are increasingly mobile for work and leisure, healthcare is transitioning from episodic symptom-based treatment toward continuity of care. The main aims of this are patient engagement, illness prevention, and active and healthy longevity. This shift, along with the secondary use of health data for societal benefit, has intensified the challenges associated with health data accessibility, comprehensiveness, and ownership.

Method

The study is structured around four health data use case scenarios from the Estonian National Health Information System (EHIS): primary medical use, medical emergency use, secondary use, and personal use. We analyze these use cases from the perspectives of accessibility, comprehensiveness, and ownership. Additionally, we examine the security, privacy, and interoperability aspects of health data.

Results

The proposed architectural solution allows individuals to consolidate all their health data into a unified Personal Health Record (PHR). This data can come from various healthcare institutions, mobile applications, medical devices for home use, and personal health notes.

Discussions

The comprehensive PHR can then be shared with healthcare providers in a semantically interoperable manner, regardless of their location or the information systems they use. Furthermore, individuals maintain the autonomy to share, sell, or donate their anonymous or pseudonymous health data for secondary use with different systems worldwide. The proposed reference architecture aligns with the principles of the European Health Data Space (EHDS) initiative, enhancing health data management by providing a secure, cost-effective, and sustainable solution.

Establishing a Pregnancy Lyme Disease Biobank

Availability of relevant biological samples supports both basic science research and patient-centered clinical studies. Establishing a biorepository faces challenges at multiple levels. These tasks include defining mission definition and scope; selection of subjects and sample types; recruitment strategies; timing of collection in the patient's journey; sample logistics and processing; determining what clinical data to collect; ensuring sample integrity on transport, processing, and storage; defining governance structures and oversight responsibilities; clarifying sample provenance and ownership; establishing procedures for sample and data access; selecting testing to be performed routinely versus upon request, and management of results; data security; funding sources; and regulatory compliance. Establishing and maintaining a biorepository therefore requires careful planning, diligent and sustained execution, technical and financial resources, stakeholder support, and flexible and resilient management to respond to changing environments and needs.

Health data privacy through homomorphic encryption and distributed ledger computing: an ethical-legal qualitative expert assessment study

BACKGROUND

Increasingly, hospitals and research institutes are developing technical solutions for sharing patient data in a privacy preserving manner. Two of these technical solutions are homomorphic encryption and distributed ledger technology. Homomorphic encryption allows computations to be performed on data without this data ever being decrypted. Therefore, homomorphic encryption represents a potential solution for conducting feasibility studies on cohorts of sensitive patient data stored in distributed locations. Distributed ledger technology provides a permanent record on all transfers and processing of patient data, allowing data custodians to audit access. A significant portion of the current literature has examined how these technologies might comply with data protection and research ethics frameworks. In the Swiss context, these instruments include the Federal Act on Data Protection and the Human Research Act. There are also institutional frameworks that govern the processing of health related and genetic data at different universities and hospitals. Given Switzerland's geographical proximity to European Union (EU) member states, the General Data Protection Regulation (GDPR) may impose additional obligations.

METHODS

To conduct this assessment, we carried out a series of qualitative interviews with key stakeholders at Swiss hospitals and research institutions. These included legal and clinical data management staff, as well as clinical and research ethics experts. These interviews were carried out with two series of vignettes that focused on data discovery using homomorphic encryption and data erasure from a distributed ledger platform.

RESULTS

For our first set of vignettes, interviewees were prepared to allow data discovery requests if patients had provided general consent or ethics committee approval, depending on the types of data made available. Our interviewees highlighted the importance of protecting against the risk of reidentification given different types of data. For our second set, there was disagreement amongst interviewees on whether they would delete patient data locally, or delete data linked to a ledger with cryptographic hashes. Our interviewees were also willing to delete data locally or on the ledger, subject to local legislation.

CONCLUSION

Our findings can help guide the deployment of these technologies, as well as determine ethics and legal requirements for such technologies.

Austria's Digital Vaccination Registry: Stakeholder Views and Implications for Governance

In this study, we explore the recent setup of a digital vaccination record in Austria. Working from a social-scientific perspective, we find that the introduction of the electronic vaccination pass was substantially accelerated by the COVID-19 pandemic. Our interviews with key stakeholders (n = 16) indicated that three main factors drove this acceleration. The pandemic (1) sidelined historical conflicts regarding data ownership and invoked a shared sense of the value of data, (2) accentuated the need for enhanced administrative efficiency in an institutionally fragmented system, and (3) helped invoke the national vaccination registry as an indispensable infrastructure for public health governance with the potential to innovate its healthcare system in the long term.

Individual notions of fair data sharing from the perspectives of Swiss stakeholders

Background

The meaningful sharing of health data between different stakeholders is central to the advancement of science and to improve care offered to individual patients. However, it is important that the interests of individual stakeholders involved in this data sharing ecosystem are taken into account to ensure fair data sharing practices. In this regard, this qualitative study investigates such practices from the perspectives of a subset of relevant Swiss expert stakeholders, using a distributive justice lens.

Methods

Using purposive and snowball sampling methodologies, 48 expert stakeholders from the Swiss healthcare and research domains were recruited for semi-structured interviews. After the experts had consented, the interviews were audio-recorded and transcribed verbatim, but omitting identifying information to ensure confidentiality and anonymity. A thematic analysis using a deductive approach was conducted to identify fair data sharing practices for secondary research purposes. Themes and subthemes were then identified and developed during the analysis.

Results

Three distributive justice themes were identified in the data sharing negotiation processes, and these are: (i) effort, which was subcategorized into two subthemes (i.e. a claim to data reciprocity and other reciprocal advantages, and a claim to transparency on data re-use), (ii) compensation, which was subcategorized into two subthemes (i.e. a claim to an academic compensation and a claim to a financial compensation), and lastly, (iii) contribution, i.e. the significance of data contributions should be matched with a corresponding reward.

Conclusions

This qualitative study provides insights, which could inform policy-making on claims and incentives that encourage Swiss expert stakeholders to share their datasets. Importantly, several claims have been identified and justified under the basis of distributive justice principles, whilst some are more debatable and likely insufficient in justifying data sharing activities. Nonetheless, these claims should be taken seriously and discussed more broadly. Indeed, promoting health research while ensuring that healthcare systems guarantee better services, it is paramount to ensure that solutions developed are sustainable, provide fair criteria for academic careers and promote the sharing of high quality data to advance science.

Supplementary Information

The online version contains supplementary material available at 10.1186/s12913-021-06906-2.

Evolution or Revolution? Recommendations to Improve the Swiss Health Data Framework

Background: Facilitating access to health data for public health and research purposes is an important element in the health policy agenda of many countries. Improvements in this sense can only be achieved with the development of an appropriate data infrastructure and the implementations of policies that also respect societal preferences. Switzerland is a revealing example of a country that has been struggling to achieve this aim. The objective of the study is to reflect on stakeholders' recommendations on how to improve the health data framework of this country.

Methods: We analysed the recommendations collected as part of a qualitative study including 48 expert stakeholders from Switzerland that have been working principally with health databases. Recommendations were divided in themes and subthemes according to applied thematic analysis.

Results: Stakeholders recommended several potential improvements of the health data framework in Switzerland. At the general level of mind-set and attitude, they suggested to foster the development of an explicit health data strategy, better communication and the respect of societal preferences. In terms of infrastructure, there were calls for the creation of a national data center, the improvement of IT solutions and the use of a Unique Identifier for patient data. Lastly, they recommended harmonising procedures for data access and to clarify data protection and consent rules.

Conclusion: Recommendations show several potential improvements of the health data framework, but they have to be reconciled with existing policies, infrastructures and ethico-legal limitations. Achieving a gradual implementation of the recommended solutions is the preferable way forward for Switzerland and a lesson for other countries that are also seeking to improve health data access for public health and research purposes.