Prof. Dr. Didier Stricker
Dr. Alain Pagani
Dr. Gerd Reis
Eric Thil
Keonna Cunningham
Dr. Oliver Wasenmüller
Dr. Gabriele Bleser
Dr. Bruno Mirbach
Dr. Jason Raphael Rambach
Dr. Bertram Taetz
Dr. Muhammad Zeshan Afzal
Sk Aziz Ali
Mhd Rashed Al Koutayni
Murad Almadani
Alaa Alshubbak
Yuriy Anisimov
Jilliam Maria Diaz Barros
Ramy Battrawy
Hammad Butt
Mahdi Chamseddine
Steve Dias da Cruz
Fangwen Shu
Torben Fetzer
Ahmet Firintepe
Sophie Folawiyo
David Michael Fürst
Kamalveerkaur Garewal
Christiano Couto Gava
Leif Eric Goebel
Tewodros Amberbir Habtegebrial
Simon Häring
Khurram Hashmi
Jigyasa Singh Katrolia
Andreas Kölsch
Onorina Kovalenko
Stephan Krauß
Paul Lesur
Muhammad Jameel Nawaz Malik
Michael Lorenz
Markus Miezal
Mina Ameli
Nareg Minaskan Karabid
Mohammad Minouei
Pramod Murthy
Mathias Musahl
Peter Neigel
Manthan Pancholi
Qinzhuan Qian
Engr. Kumail Raza
Dr. Nadia Robertini
María Alejandra Sánchez Marín
Dr. Kripasindhu Sarkar
Alexander Schäfer
Pascal Schneider
René Schuster
Mohamed Selim
Lukas Stefan Staecker
Dennis Stumpf
Yongzhi Su
Xiaoying Tan
Yaxu Xie
Dr. Vladislav Golyanik
Dr. Aditya Tewari
André Luiz Brandão
Incorporating privacy by design in body sensor networks for medical applications: A privacy and data protection framework
Incorporating privacy by design in body sensor networks for medical applications: A privacy and data protection framework
Computer Science and Information Systems Journal 18 Seiten 323-347 ComSIS Consortium 2021 .
- Abstract:
- Privacy and Data protection are highly complex issues within eHealth/M-Health systems. These systems should meet specific requirements deriving from the organizations and users, as well as from the variety of legal obligations deriving from GDPR that dictate protection rights of data subjects and responsibilities of data controllers. To address that, this paper proposes a Privacy and Data Protection Framework that provides the appropriate steps so as the proper technical, organizational and procedural measures to be undertaken. The framework, beyond previous literature, supports the combination of privacy by design principles with the newly introduced GDPR requirements in order to create a strong elicitation process for deriving the set of the technical security and privacy requirements that should be addressed. It also proposes a process for validating that the elicited requirements are indeed fulfilling the objectives addressed during the Data Protection Impact Assessment (DPIA), carried out according to the GDPR.