Cloud-Based Identity and Identity Meta-Data

The increasing use of digital technologies in public health management has significantly expanded the processing of sensitive personal data, requiring legal mechanisms capable of ensuring the protection of privacy and fundamental rights. In this context, the Brazilian General Data Protection Law establishes regulatory parameters governing the processing of personal information by public and private institutions, including those operating in the healthcare sector. This study aims to analyze the legal challenges related to the application of the General Data Protection Law in the processing of sensitive data within the public health system of Manaus, Amazonas. The research is characterized as a qualitative and descriptive literature review, based on recent scientific articles and academic studies addressing personal data protection, information governance and public sector responsibility in health data processing. The results indicate that the implementation of the legislation faces challenges related to technological infrastructure, the absence of consolidated institutional information security policies and the need for training of public agents responsible for data processing. It is observed that the effectiveness of data protection regulations depends on the integration between legal norms, administrative practices and governance mechanisms capable of ensuring transparency, security and accountability in the use of personal information. The study concludes that strengthening institutional strategies aimed at protecting sensitive data represents an essential element for the consolidation of safer public health services aligned with the protection of fundamental rights, particularly within the Amazonian context.

Vietnam: Data Privacy in a Communist ASEAN State

Internet services have collected our personal data since their inception. In the beginning, the personal data collection was uncoordinated and was limited to a few selected data types such as names, ages, birthdays, etc. Due to the widespread use of social media, more and more personal data has been collected by different online services. We increasingly see that Internet of Things (IoT) devices are also being adopted by consumers, making it possible for companies to capture personal data (including very sensitive data) with much less effort and autonomously at a very low cost. Current systems architectures aim to collect, store, and process our personal data in the cloud with very limited control when it comes to giving back to citizens. However, Personal Data Stores (PDS) have been proposed as an alternative architecture where personal data will be stored within households, giving us complete control (self-sovereignty) over our data. This paper surveys the current literature on Personal Data Stores (PDS) that enable individuals to collect, control, store, and manage their data. In particular, we provide a comprehensive review of related concepts and the expected benefits of PDS platforms. Further, we compare and analyse existing PDS platforms in terms of their capabilities and core components. Subsequently, we summarise the major challenges and issues facing PDS platforms’ development and widespread adoption.

Confidentiality-minded framework for blockchain-based BIM design collaboration

PurposeFocusing on the Indian context, with the increase in the amount of data and its analysis in health-care knowledge management (KM), the privacy concerns rise which results in loss of trust of an individual in e-health-care systems. Privacy issues in health care, specific to India, are caused by prevalent complacency, culture, politics, budget limitations, large population and infrastructures. Because of these factors, data security requires a backseat that allows easy access to confidential information. Furthermore, the prevalent culture affects health-care disclosure in India. In many cultures, disclosing sensitive personal health-care data is considered ill mannered. This leads to discrepancies in the recorded health-care data and a decrease in the level of treatment meted out. The results and statistics of treatments given do not match the records because of inaccurate data reporting. With the significant rise in the analysis and use of technology in health-care KM systems, it is important to understand the perception of KM in terms of its use and awareness about data sharing in the KM system. The purpose of the paper is to measure the perception of privacy issues in the context of Indian healthcare management systems.Design/methodology/approachTo measure the perception of the use of the KM system, a set of 20 questions was circulated with a sample size of 337 which includes health-care researchers, doctors, practitioners and patients. The questions focused upon the use, share the sensitive health data in the KM platform. All the demographic information such as age, sex, religion, occupation is recorded. The privacy of the individual is maintained while circulating the questionnaire. The usage of health KM system and its privacy is measured through means and t-test.FindingsThe results of the t-test were found positive. This research study finds that the privacy factor is important among the Indians to share the information with the KM repository. It is also found that medical practitioners or data custodians are not much serious about sensitive data is being stored for analysis. From the statistical perception of usage of KM and its privacy, new architecture and privacy guidelines were suggested which can be considered in future research.Research limitations/implicationsFrom the literature review, the questionnaire has developed which can help policymakers and hospital administrators collect information about KM processes in health-care organizations, and this can result in higher performance of health organizations. The privacy factor can also be included in typical health KM architecture ensure that while knowledge acquisition process, privacy of individual or organization can be maintained.Social implicationsKM enhances the value of corporations and business industries through knowledge production, distribution and provides reliable access to the knowledge resources. KM in health care can comprise a confluence of formal methodologies and techniques to facilitate the creation, identification, acquisition, development, preservation, dissemination and finally the utilization of the various facets of a health-care enterprise’s knowledge assets. According to IBM Global executive report in the year 2012, the entire health-care system has changed from diseases-centric to patient-centric. India is emerging in terms of revenue and employment in the health-care field. The advances of information and communication technology help the health-care sector streamline for data structure and access and health analytics.Originality/valueIn India, the KM is frequently used in health-care industries majorly by health-care practitioners and professionals. As health-care data and knowledge are considered to be sensitive, the privacy of an individual while using the data cannot be compromised. The proposed empirical work will provide a solution in determining the main barriers of implementing privacy policies that need to be solved first and to ensure effective implementation of KM in the health care of India.

The aim: To establish public opinion on the limits of medical confidentiality in an epidemic and the widespread use of applications that contain personal data, including those regarding health, to understand the possibility of changing the paradigm of public policy to protect medical confidentiality in an exacerbation of the epidemic situation. Materials and methods: This research is based on regulatory acts, scientific articles, and opinions of both medical workers and ordinary citizens of Poland, Germany, and Ukraine, judicial practice, doctrinal ideas, and views on this issue. Such methods as dialectical, comparative, analytic, synthetic, comprehensive, statistical, and generalization. Results: the results of a survey of residents of Poland, Germany, and Ukraine showed that one of the pandemic consequences was that a significant number of respondents were willing to partially renounce the right to medical confidentiality in the face of exacerbating epidemic threats to reduce the number of infected. Conclusions: In the face of the SARS-Cov-2 virus, nations worldwide have faced the challenge of respecting the right to privacy, particularly in terms of medical confidentiality. Virtual methods of patient communication with healthcare professionals use mobile electronic services (applications), and other new technologies in the context of the COVID-19 pandemic have exacerbated the issue of understanding the boundaries of medical confidentiality and personal data protection. In order to maintain an effective balance between human rights and public health, the mass collection and storage of sensitive personal data must take place following the Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. At the same time, it is expedient to recommend states to specify specific provisions of this Regulation in order to avoid an expanded interpretation of certain of its provisions.

The publication and interchange of RDF datasets online has experienced significant growth in recent years, promoted by different but complementary efforts, such as Linked Open Data, the Web of Things and RDF stream processing systems. However, the current Linked Data infrastructure does not cater for the storage and exchange of sensitive or private data. On the one hand, data publishers need means to limit access to confidential data (e.g. health, financial, personal, or other sensitive data). On the other hand, the infrastructure needs to compress RDF graphs in a manner that minimises the amount of data that is both stored and transferred over the wire. In this paper, we demonstrate how HDT - a compressed serialization format for RDF - can be extended to cater for supporting encryption. We propose a number of different graph partitioning strategies and discuss the benefits and tradeoffs of each approach.

Background/IntroductionTo promote transparency for both the public and researchers [1, 2], our objective was to implement all HDRUK Transparency Standards within the Grampian Data Safe Haven (DaSH) [3] website [4]. Particularly, we aimed to clarify sensitive data processing within our Trusted Research Environment (TRE) and improve accessibility of ethics and governance permissions procedures to facilitate public-benefit research. MethodsUtilising Knowledge Translation [5] and Implementation Science [6] methods, we identified relevant audiences to engage with the website to develop and evaluate digital content. A holistic approach to navigation, content creation and visuality was implemented to improve user experience for diverse audiences [7], leveraging plain language strategies [8] for understanding and transparency. ResultsWe addressed Standard 1 by publishing the DaSH Project Initiation Document and clear information on data processing. For Standards 3, 4 and 5, we enhanced user experience through streamlined navigation, dropdowns, signposting, and clear language, ensuring information remains appropriate for diverse audiences. Additionally, we established a quarterly review/update cycle. For Standard 6, we documented our Governance and Security structures alongside ISO27001 certification, a Data Use Register, and an Impact list of DaSH-supported research publications. Our most significant contribution was toward Standard 2, creating detailed permissions pathways guidance documents, including visual aids and permissions application checklists. To our knowledge, we are the first UK TRE to fully document and publish all available permissions pathways [9]. ConclusionsFirst, implementing the six HDRUK Transparency Standards simultaneously enables holistic improvements to openness, maximising the benefits of their complementary recommendations. Second, publishing project lifecycle information clarifies TRE and researcher responsibilities, especially during data extraction, pseudonymisation, and linkage stages [10], fostering trust and confidence in sensitive data use and processing. Third, by documenting ethics and governance pathways available in visual, text, and downloadable formats, we have demonstrably improved ethical and research literacy for both researchers and the public. By clearly articulating an easy-to-follow process for each permissions pathway, this initiative has been identified by our audience as the most impactful improvement in making sensitive data research transparent and accessible. OtherThere were three main lessons learnt. (1) A four-month timescale for website redesign incorporating new content, and multi-audience feedback, could prove overly ambitious without a strong procurement team, dedicated staff, and established audience connections. (2) Content management systems may be a significantly limiting component, impacting both visual appeal and the audiences’ preferred access (e.g. mobile). Implementing certain recommendations (e.g. Data Use Register; Database register), can lead to potentially dense pages and visually cluttered tabular information that are difficult to navigate. (3) Publishing audit findings or information about breaches presents a communication challenge. The potential exists for misinterpretations of legal, technical, or classification terms, which could erode public trust, even with transparency as the aim.

A multi-objective privacy preservation model for cloud security using hybrid Jaya-based shark smell optimization

Case law regularly includes personal data on identifiable persons, often of a rather sensitive nature. This makes the EU General Data Protection Regulation (GDPR) relevant. However, the processing of personal data in case law has until recently not been questioned from the point of view of data protection of the individuals concerned. The Court of Justice of the European Union has taken steps ensure such protection for individuals appearing before the courts. Sweden has chosen another path. As transparency is a highly treasured in Sweden, including transparency in the judiciary, restricting access to the full verdict is sensitive. Instead, the processing of personal data has been restricted in a certain areas, such as research. In order to fulfill the requirements for an ‘appropriate safeguard’ under Article 89 GDPR, an ethical approval is needed for all research on specific categories of sensitive personal data, with no exception for publicly-available official documents like case law. The question posed is how the interest in protection of personal data retrieved from case law can be reconciled with the interest in transparency of the judicial process. It is concluded that even though requirements for an ethical approval of legal research hardly can be seen as a relevant ‘appropriate safeguard’, it cannot be denied that there is a legitimate interest of identifiable persons in case law to have their rights in personal data at least considered. Courts should therefore be stronger in elucidating when and why transparency is of overriding importance, and when and why data protection and the interest of secrecy should prevail. Data protection, transparency, case law, official documents, secrecy, sensitive data, research exception, appropriate safeguard, ethical approval

Advances in digital communication play an important role in our daily lives in today’s world. In general, information security systems fall into two categories: encryption and information hiding. The storage and transmission of sensitive personal data have become a part of everyday life for professional and personal well-being. Therefore, the issue of secure storage and transmission of confidential information is interest to many researchers. Steganography is a collective method to hide sensitive data in unobtrusive digital media such as video, audio, and images. One of the biggest challenges in developing steganography systems is finding the right balance between metrices like reliability, security, and data privacy. This project provides information about how the Bit Plane Complexity Steganography (BPCS) technology is applied to both grayscale and color imaging techniques and assesses performance parameters such as data concealment, security and stability based on the peak signal-to-noise ratio (PSNR) and Mean Square Error (MSE) with various test cases to explain how it works for different files and images.

When transferring sensitive data to a non-trusted party, end-users require that the data be kept private. Mobile and IoT application developers want to leverage the sensitive data to provide better user experience and intelligent services. Unfortunately, existing programming abstractions make it impossible to reconcile these two seemingly conflicting objectives. In this paper, we present a novel programming mechanism for distributed managed execution environments that hides sensitive user data, while enabling developers to build powerful and intelligent applications, driven by the properties of the sensitive data. Specifically, the sensitive data is never revealed to clients, being protected by the runtime system. Our abstractions provide declarative and configurable data query interfaces, enforced by a lightweight distributed runtime system. Developers define when and how clients can query the sensitive data's properties (i.e., how long the data remains accessible, how many times its properties can be queried, which data query methods apply, etc.). Based on our evaluation, we argue that integrating our novel mechanism with the Java Virtual Machine (JVM) can address some of the most pertinent privacy problems of IoT and mobile applications.

Forensic analysis of SQL server transaction log in unallocated area of file system

Access management of files which contain sensitive personal data such as electronic health records, financial history of individuals or legal documents is a challenge, because of the variety of participating entities such as legal institutions and privacy of the files. Trust among the entities are generally provided by a central authority such as a government agency. Blockchain technology and distributed file systems provide an opportunity to address this issue without having a central authority to rely on. The lack of a central authority provides a better security as no single entity can control the whole system. However, it brings up other issues. One of the main issues is to manage access rights of sensitive data in the system. In this work, we present a framework for sharing critical document using IPFS and Blockchain technology. Rather than providing framework specific to a single domain such as electronic health records or legal document sharing, we propose a general framework which can be tailored for the specific domains.

The rapid development of information technology makes business organizations face major challenges in managing and securing sensitive data. The development of information technology has changed data storage systems from local media to cloud computing, enabling data access and processing via the internet. Services like Google Drive and OneDrive offer security, accessibility, and data backup, but pose challenges for business organizations, especially in terms of security of sensitive data and operational costs that increase as users grow. This research aims to design a local cloud as a private cloud to improve data management and security in the organization. With a private cloud, companies can control data access more tightly, increase privacy, and enable employees to access applications and data from various locations more safely and efficiently. The results of this research are in the form of a private cloud based on a private server which was developed as a file server with access rights based on departments, across departments, projects or work groups. This system utilizes open-source technology and is equipped with an encrypted Virtual Private Network (VPN) to support remote work models (Work From Home, WFH) and work flexibility from anywhere (Work From Anywhere, WFA). With this solution, organizations can increase operational efficiency, reduce the risk of data leaks, optimize more affordable technology resources, and maintain full control of sensitive company data.