Usable Privacy and Security in Personal Health Records - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2011

Usable Privacy and Security in Personal Health Records

Inma Carrión
  • Function : Author
  • PersonId : 1017932
Jose L. Fernández-Alemán
  • Function : Author
  • PersonId : 1017933
Ambrosio Toval
  • Function : Author
  • PersonId : 1017934


PHRs (Personal Health Records) store individuals’ personal health information. Access to this data is controlled by the patient, rather than by the health care provider. Companies such as Google and Microsoft are establishing a leadership position in this emerging market. In this context, the need for psychological acceptability in privacy and security protection mechanisms is essential. Any privacy and security mechanism must be acceptable from a usability perspective. This paper presents a study of the privacy policies of 22 free web-based PHRs. Security and privacy characteristics have been extracted according to the ISO/TS 13606-4 standard. In general, quite a good level was observed in the characteristics analyzed. Nevertheless, some improvements could be made to current PHR privacy policies to enhance the management of other users’ data, the notification of changes to the privacy policy to users and the audit of accesses to users’ PHRs.
Fichier principal
Vignette du fichier
978-3-642-23768-3_3_Chapter.pdf (409.66 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01596945 , version 1 (28-09-2017)





Inma Carrión, Jose L. Fernández-Alemán, Ambrosio Toval. Usable Privacy and Security in Personal Health Records. 13th International Conference on Human-Computer Interaction (INTERACT), Sep 2011, Lisbon, Portugal. pp.36-43, ⟨10.1007/978-3-642-23768-3_3⟩. ⟨hal-01596945⟩
289 View
82 Download



Gmail Facebook Twitter LinkedIn More