COVID-19 Contact Tracing: A Review on mHealth Application and HIPPA (Preprint)

2021 ◽  
Author(s):  
Lorna Migiro ◽  
Hossain Shahriar ◽  
Sweta Sneha

BACKGROUND Contact tracing has been implemented as a necessary tool to slow the spread outbreaks over the years. During the COVID-19 pandemic, the introduction of digital applications has allowed a lot of flexibility regarding transmission by driving more people to testing and quarantine. OBJECTIVE This study discusses contact tracing application usage in COVID-19, compare and analyze them based on HIPPA privacy rule. We also discuss challenges facing these new applications and recommend best practices. METHODS The research sampled top ten applications currently in use. Using Android devices, we downloaded and interacted with apps that had over 100,000 downloads on google play store the way a normal user would. we reviewed their privacy policies and compared them against HIPPAs’ privacy rule and generated a checklist. RESULTS The study interacted and analyzed 10 contact tracing applications, particular attention was paid to how the apps’ privacy policies and Google Play Store app privacy policy descriptions disclosed information. CONCLUSIONS Contact tracing applications have proved to be a fundamental pillar during this pandemic. Aligning this apps with the HIPPA privacy rule is one of the major challenges they face. Privacy concerns, user adoption and perception obstacles have also been associated with this apps. CLINICALTRIAL Not applicable.

Teknologi ◽  
2021 ◽  
Vol 11 (1) ◽  
pp. 46-58
Author(s):  
Syifa Ilma Nabila Suwandi ◽  
◽  
Xavier Wahyuadi Seloatmodjo ◽  
Alexandra Situmorang ◽  
Nur Aini Rakhmawati ◽  
...  

The presence of user contact applications in the community as a means of preventing and overcoming the spread of COVID-19 can pose another risk to the potential dangers of protecting data privacy from contact tracing. This research examines more deeply related to user privacy policies through 3 (three) samples of android-based user contact applications that are used as a means of preventing, overcoming and controlling the spread of the COVID-19 virus in today's society and by reviewing the rules contained in the Presidential Regulation of the Republic. Indonesian No. 95 of 2018 concerning Electronic-Based Government Systems (SPBE). The study in this study was prepared using the method of literature study, observation and qualitative analysis. A comparison was made regarding the data privacy of the three samples, which was then evaluated and matched with the form of the privacy policy according to Presidential Regulation No. 95 of 2018 concerning Electronic-Based Government Systems (SPBE) and according to the ideal form of data privacy policy based on several experts. Comparative data is obtained through related applications and other electronic media which are then discussed together to conclude and evaluate the data privacy policies of the three sample applications. Based on this research, it can be concluded that privacy intervention to deal with damage and save lives is legal as long as its use is in accordance with regulations in the health, disaster, telecommunications, informatics and other related fields; in this case listed in the Presidential Decree No. 95 of 2018 concerning Electronic-Based Government Systems (SPBE) and there needs to be an increase in efforts to maintain the security and confidentiality of user data privacy through continuous system and data maintenance, encryption of data privacy storage in the manager's data warehouse and added with other data privacy policies can guarantee the security and confidentiality of the privacy of user data.


Author(s):  
Sema Bulat Demir ◽  
Ayten Övür

Nowadays, social media platforms are frequently being used on the Internet. When the users create an account for these platforms, they are required to accept the data privacy policy. With the approval of the data policy, major problems may arise such as observing every activity of users on the platform, violations of security and protection of personal data, and sharing user data with third parties for commercial purposes. In this regard, it is significant to examine the privacy policies of social media platforms in detail. In this research, we examined the privacy policies of the five most popular free applications on the communication section of the Google Play Store on January 30th, 2021. The privacy policies of these applications were analyzed with the content analysis method, and the research aims to reveal the area of utilization of the data that the users provide, with or without the permission of the user.


2021 ◽  
Author(s):  
Rachele Hendricks-Sturrup

BACKGROUND Pulse oximeter apps became of interest to consumers and app users during COVID-19, particularly when traditional over-the-counter pulse oximeter devices became in short supply. Yet, no study to date has examined the privacy implications to engaging in or using pulse oximeter apps that are downloadable to individual mobile devices. OBJECTIVE This study sought to examine privacy implications, through an assessment of privacy policies, for using top-rated or -downloaded pulse oximeter apps during COVID-19. METHODS We reviewed privacy policies for a total of six pulse oximeter apps that had either at least 500 downloads (Google Play Store apps only) or a three out of five-star rating (Apple Store apps only). The privacy policies were reviewed against current privacy best practices for wellness apps: 1) what data is collected, and how is it collected, stored, used, secured, and disclosed; 2) uses of data for advertising (ad); 3) de-identification commitments, 4) whether any covered data will be used or shared for research; 5) users’ options regarding access, correction, or deletion of covered data; 6) under what circumstances covered data is intended to be collected from nonusers; and 7) how the company responds to requests for users’ covered data from federal, state, local, or foreign law and civil enforcement agencies. RESULTS There is variation in both the regulatory nature and data privacy protections offered by pulse oximeter apps, with notable privacy protection limitations and gaps. CONCLUSIONS Pulse oximeter app users are highly encouraged to seek professional medical advice before using or relying on pulse oximeter apps. App developers are also encouraged to review and incorporate existing privacy best practices into the design of their apps and development of their privacy policies.


Hypertension ◽  
2020 ◽  
Vol 76 (Suppl_1) ◽  
Author(s):  
Khaled Abdelrahman ◽  
Josh Bilello ◽  
Megna Panchbhavi ◽  
Mohammed S Abdullah

Introduction: Diabetes mobile applications (apps) that help patients monitor disease have led to privacy concerns. We aimed to assess privacy policies for diabetes mobile applications with a focus on data transmission to outside parties. Methods: The App Store was used to gather apps pertaining to diabetes by searching “diabetes” and “blood sugar”. Two readers evaluated privacy policies (PP) including data sharing and storing techniques for mention of 27 predetermined criteria. All network traffic generated while loading and using the app was intercepted by a man-in-the-middle attack to listen to data delivered between the sender and receiver of data transmissions. A packet analyzer determined contents of transmission, where data was sent, and if transmission contained user data. Results: Of 35 apps evaluated, 29 (83%) had PP. The most frequent transmission destinations were Google (n=130 transmissions), Kamai Technologies (n=53), Facebook (n=38) and Amazon (n=33). 35 of 35 apps (100%) were transmitting data to a third party. 2 of 2 (100%) of those who had a privacy policy without mention of a third party transmitted data to a third party. 8 of 8 (100%) apps who mentioned they would not transmit to a third party were found to do so. 19 of 19 (100%) apps who mentioned they would transmit data to a third party were found to do so. All apps (n=6) without a privacy policy were found to be transmitting data to a third party. Conclusion: Most diabetes apps on the App store have accessible PP. All apps evaluated transmitted data to a third party, even when the policy stated this would not occur. As mobile applications are increasingly utilized by patients, it is important to warn of privacy implications.


2016 ◽  
Vol 58 (5) ◽  
Author(s):  
Florian Schaub ◽  
Travis D. Breaux ◽  
Norman Sadeh

AbstractPrivacy policies are supposed to provide transparency about a service's data practices and help consumers make informed choices about which services to entrust with their personal information. In practice, those privacy policies are typically long and complex documents that are largely ignored by consumers. Even for regulators and data protection authorities privacy policies are difficult to assess at scale. Crowdsourcing offers the potential to scale the analysis of privacy policies with microtasks, for instance by assessing how specific data practices are addressed in privacy policies or extracting information about data practices of interest, which can then facilitate further analysis or be provided to users in more effective notice formats. Crowdsourcing the analysis of complex privacy policy documents to non-expert crowdworkers poses particular challenges. We discuss best practices, lessons learned and research challenges for crowdsourcing privacy policy analysis.


Digital ◽  
2021 ◽  
Vol 1 (4) ◽  
pp. 198-215
Author(s):  
Dhiren A. Audich ◽  
Rozita Dara ◽  
Blair Nonnecke

Privacy policies play an important part in informing users about their privacy concerns by operating as memorandums of understanding (MOUs) between them and online services providers. Research suggests that these policies are infrequently read because they are often lengthy, written in jargon, and incomplete, making them difficult for most users to understand. Users are more likely to read short excerpts of privacy policies if they pertain directly to their concern. In this paper, a novel approach and a proof-of-concept tool are proposed that reduces the amount of privacy policy text a user has to read. It does so using a domain ontology and natural language processing (NLP) to identify key areas of the policies that users should read to address their concerns and take appropriate action. Using the ontology to locate key parts of privacy policies, average reading times were substantially reduced from 29 to 32 min to 45 s.


2020 ◽  
Author(s):  
Jing Fan

UNSTRUCTURED Smartphone-based contact tracing is proven to be effective in epidemic containment. To maintain its utilization meanwhile ensure the protection of personal privacy, different countries came up with different practices, new exploratory solutions may come into real-world practice soon as well.


Author(s):  
Benjamin Shao ◽  
Robert D. St. Louis

Many companies are forming data analytics teams to put data to work. To enhance procurement practices, chief procurement officers (CPOs) must work effectively with data analytics teams, from hiring and training to managing and utilizing team members. This chapter presents the findings of a study on how CPOs use data analytics teams to support the procurement process. Surveys and interviews indicate companies are exhibiting different levels of maturity in using data analytics, but both the goal of CPOs (i.e., improving performance to support the business strategy) and the way to interact with data analytics teams for achieving that goal are common across companies. However, as data become more reliably available and technologies become more intelligently embedded, the best practices of organizing and managing data analytics teams for procurement will need to be constantly updated.


Sign in / Sign up

Export Citation Format

Share Document