Privacy impact assessment in the design of transnational public health information systems: the BIRO project
- C T Di Iorio1,
- F Carinci1,
- J Azzopardi2,
- V Baglioni3,
- P Beck4,
- S Cunningham5,
- A Evripidou6,
- G Leese7,
- K F Loevaas8,
- G Olympios6,
- M Orsini Federici3,
- S Pruna9,
- P Palladino10,
- S Skeie8,
- P Taverner8,
- V Traynor6,
- M Massi Benedetti3
- 1Serectrix s.n.c., Pescara, Italy
- 2Department of Medicine, University of Malta, G’Mangia, Malta
- 3Department of Internal Medicine, University of Perugia, Perugia, Italy
- 4Joanneum Research, Graz, Austria
- 5Division of Medicine and Therapeutics, Ninewells Hospital, University of Dundee, Dundee, Scotland
- 6Cyprus Ministry of Health, Nicosia, Cyprus
- 7School of Medicine, University of Dundee, Dundee, Scotland
- 8NOKLUS, Bergen, Norway
- 9Paulescu Institute, Bucharest, Romania
- 10Department of Electronic and Information Engineering, University of Perugia, Perugia, Italy
- Correspondence to Concetta Tania Di Iorio, Via Gran Sasso 79, 65121 Pescara (PE), ITALY;
- Received 23 February 2009
- Revised 3 June 2009
- Accepted 8 July 2009
Objectives: To foster the development of a privacy-protective, sustainable cross-border information system in the framework of a European public health project.
Materials and methods: A targeted privacy impact assessment was implemented to identify the best architecture for a European information system for diabetes directly tapping into clinical registries. Four steps were used to provide input to software designers and developers: a structured literature search, analysis of data flow scenarios or options, creation of an ad hoc questionnaire and conduction of a Delphi procedure.
Results: The literature search identified a core set of relevant papers on privacy (n = 11). Technicians envisaged three candidate system architectures, with associated data flows, to source an information flow questionnaire that was submitted to the Delphi panel for the selection of the best architecture. A detailed scheme envisaging an “aggregation by group of patients” was finally chosen, based upon the exchange of finely tuned summary tables.
Conclusions: Public health information systems should be carefully engineered only after a clear strategy for privacy protection has been planned, to avoid breaching current regulations and future concerns and to optimise the development of statistical routines. The BIRO (Best Information Through Regional Outcomes) project delivers a specific method of privacy impact assessment that can be conveniently used in similar situations across Europe.
Competing interests None.
Provenance and Peer review Not commissioned; externally peer reviewed.