| Download | - View accepted manuscript: Towards a Model for Risk and Consent Management of Private Health Information (PDF, 251 KiB)
|
|---|
| Author | Search for: Buffett, Scott; Search for: Kosa, T.A. |
|---|
| Format | Text, Article |
|---|
| Conference | The Conference on Privacy, Security and Trust (PST2006), October 31, 2006, Toronto, Ontario, Canada |
|---|
| Abstract | Health information custodians and network providers within the circle of care for a patient must meet certain legal obligations regarding the collection, access and disclosure of personal health information. We present a framework for consent and risk management that can be used to help manage a patient's consent for releasing personal health information, and analyze the risk involved in handling this type of data. A patient's preferences for specific privacy policies (expressed in P3P) are elicited through querying, and extra information is inferred using a Bayesian network. A risk analysis is performed to help a custodian to make informed decisions when handling personal health information. Thus the custodian and provider can help each other meet their respective legal obligations, and patients are more easily able to exercise their privacy rights. |
|---|
| Publication date | 2006 |
|---|
| In | |
|---|
| Language | English |
|---|
| NRC number | NRCC 48746 |
|---|
| NPARC number | 5764504 |
|---|
| Export citation | Export as RIS |
|---|
| Report a correction | Report a correction (opens in a new tab) |
|---|
| Record identifier | cd2724dc-cf5c-49b9-bc3f-08d1fd079aba |
|---|
| Record created | 2009-03-29 |
|---|
| Record modified | 2020-10-09 |
|---|
