Implementation of the General Data Protection Regulation: A Survey in Health Clinics

Isabel Maria Lopes; Pedro Oliveira

doi:10.23919/CISTI.2018.8399156

Implementation of the General Data Protection Regulation: A Survey in Health Clinics

Isabel Maria Lopes, Pedro Oliveira

Polytechnic Institute of Bragança

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

The new General Data Protection Regulation (GDPR) was approved on April 27 2016. The GDPR 2016/679 aims to ensure the coherence of natural persons' protection within the European Union (EU), comprising very important innovative rules that will be applied across the EU and will directly affect every Member State. Furthermore, it aims to overcome the existing fragmented regulations and to modernise the principles of privacy in the EU. This regulation will come into force in May 2018, bringing along several challenges for citizens, companies and other private and public organisations. The protection of personal data is a fundamental right. The GDPR considers a 'special category of personal data', which includes data regarding health, since this is sensitive data and is therefore subject to special conditions regarding treatment and access by third parties. This premise provides the focus of this research work, where the implementation of the GDPR in health clinics in Portugal is analysed. The results are discussed in light of the data collected in the survey and possible future works are identified.

Original language	English
Title of host publication	13th Iberian Conference on Information Systems and Technologies. CISTI 2018
Editors	Alvaro Rocha, Manuel Perez Cota, Adolfo Lozano-Tello, Ramiro Goncalves
Number of pages	6
Place of Publication	Los Alamitos
Publisher	IEEE Computer Society Press
Publication date	2018
ISBN (Print)	9781538648858
ISBN (Electronic)	9789899843486
DOIs	https://doi.org/10.23919/CISTI.2018.8399156
Publication status	Published - 2018
Externally published	Yes
Event	13th Iberian Conference on Information Systems and Technologies, CISTI 2018 - Caceres, Spain Duration: 13 Jun 2018 → 16 Jun 2018 Conference number: 13

Conference

Conference	13th Iberian Conference on Information Systems and Technologies, CISTI 2018
Number	13
Country/Territory	Spain
City	Caceres
Period	13/06/2018 → 16/06/2018

Series	Iberian Conference on Information Systems and Technologies, CISTI
ISSN	2166-0727

Keywords

General data protection regulation
Health clinics
Personal data
Regulation (EU) 2016/679

Access to Document

10.23919/CISTI.2018.8399156Licence: Unspecified

Handle.net

Persistent link

Cite this

Lopes, Isabel Maria ; Oliveira, Pedro. / Implementation of the General Data Protection Regulation : A Survey in Health Clinics. 13th Iberian Conference on Information Systems and Technologies. CISTI 2018. editor / Alvaro Rocha ; Manuel Perez Cota ; Adolfo Lozano-Tello ; Ramiro Goncalves. Los Alamitos : IEEE Computer Society Press, 2018. (Iberian Conference on Information Systems and Technologies, CISTI).

@inproceedings{65d711f676fd48518202adb6c6cdebf2,

title = "Implementation of the General Data Protection Regulation: A Survey in Health Clinics",

abstract = "The new General Data Protection Regulation (GDPR) was approved on April 27 2016. The GDPR 2016/679 aims to ensure the coherence of natural persons' protection within the European Union (EU), comprising very important innovative rules that will be applied across the EU and will directly affect every Member State. Furthermore, it aims to overcome the existing fragmented regulations and to modernise the principles of privacy in the EU. This regulation will come into force in May 2018, bringing along several challenges for citizens, companies and other private and public organisations. The protection of personal data is a fundamental right. The GDPR considers a 'special category of personal data', which includes data regarding health, since this is sensitive data and is therefore subject to special conditions regarding treatment and access by third parties. This premise provides the focus of this research work, where the implementation of the GDPR in health clinics in Portugal is analysed. The results are discussed in light of the data collected in the survey and possible future works are identified.",

keywords = "General data protection regulation, Health clinics, Personal data, Regulation (EU) 2016/679",

author = "Lopes, {Isabel Maria} and Pedro Oliveira",

year = "2018",

doi = "10.23919/CISTI.2018.8399156",

language = "English",

isbn = "9781538648858",

series = "Iberian Conference on Information Systems and Technologies, CISTI",

publisher = "IEEE Computer Society Press",

editor = "Alvaro Rocha and Cota, {Manuel Perez} and Adolfo Lozano-Tello and Ramiro Goncalves",

booktitle = "13th Iberian Conference on Information Systems and Technologies. CISTI 2018",

note = "13th Iberian Conference on Information Systems and Technologies, CISTI 2018, CISTI 2018 ; Conference date: 13-06-2018 Through 16-06-2018",

}

Lopes, IM & Oliveira, P 2018, Implementation of the General Data Protection Regulation: A Survey in Health Clinics. in A Rocha, MP Cota, A Lozano-Tello & R Goncalves (eds), 13th Iberian Conference on Information Systems and Technologies. CISTI 2018. IEEE Computer Society Press, Los Alamitos, Iberian Conference on Information Systems and Technologies, CISTI, 13th Iberian Conference on Information Systems and Technologies, CISTI 2018, Caceres, Spain, 13/06/2018. https://doi.org/10.23919/CISTI.2018.8399156

Implementation of the General Data Protection Regulation: A Survey in Health Clinics. / Lopes, Isabel Maria; Oliveira, Pedro.
13th Iberian Conference on Information Systems and Technologies. CISTI 2018. ed. / Alvaro Rocha; Manuel Perez Cota; Adolfo Lozano-Tello; Ramiro Goncalves. Los Alamitos: IEEE Computer Society Press, 2018. (Iberian Conference on Information Systems and Technologies, CISTI).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Implementation of the General Data Protection Regulation

T2 - 13th Iberian Conference on Information Systems and Technologies, CISTI 2018

AU - Lopes, Isabel Maria

AU - Oliveira, Pedro

N1 - Conference code: 13

PY - 2018

Y1 - 2018

N2 - The new General Data Protection Regulation (GDPR) was approved on April 27 2016. The GDPR 2016/679 aims to ensure the coherence of natural persons' protection within the European Union (EU), comprising very important innovative rules that will be applied across the EU and will directly affect every Member State. Furthermore, it aims to overcome the existing fragmented regulations and to modernise the principles of privacy in the EU. This regulation will come into force in May 2018, bringing along several challenges for citizens, companies and other private and public organisations. The protection of personal data is a fundamental right. The GDPR considers a 'special category of personal data', which includes data regarding health, since this is sensitive data and is therefore subject to special conditions regarding treatment and access by third parties. This premise provides the focus of this research work, where the implementation of the GDPR in health clinics in Portugal is analysed. The results are discussed in light of the data collected in the survey and possible future works are identified.

AB - The new General Data Protection Regulation (GDPR) was approved on April 27 2016. The GDPR 2016/679 aims to ensure the coherence of natural persons' protection within the European Union (EU), comprising very important innovative rules that will be applied across the EU and will directly affect every Member State. Furthermore, it aims to overcome the existing fragmented regulations and to modernise the principles of privacy in the EU. This regulation will come into force in May 2018, bringing along several challenges for citizens, companies and other private and public organisations. The protection of personal data is a fundamental right. The GDPR considers a 'special category of personal data', which includes data regarding health, since this is sensitive data and is therefore subject to special conditions regarding treatment and access by third parties. This premise provides the focus of this research work, where the implementation of the GDPR in health clinics in Portugal is analysed. The results are discussed in light of the data collected in the survey and possible future works are identified.

KW - General data protection regulation

KW - Health clinics

KW - Personal data

KW - Regulation (EU) 2016/679

U2 - 10.23919/CISTI.2018.8399156

DO - 10.23919/CISTI.2018.8399156

M3 - Article in proceedings

AN - SCOPUS:85049925564

SN - 9781538648858

T3 - Iberian Conference on Information Systems and Technologies, CISTI

BT - 13th Iberian Conference on Information Systems and Technologies. CISTI 2018

A2 - Rocha, Alvaro

A2 - Cota, Manuel Perez

A2 - Lozano-Tello, Adolfo

A2 - Goncalves, Ramiro

PB - IEEE Computer Society Press

CY - Los Alamitos

Y2 - 13 June 2018 through 16 June 2018

ER -

Lopes IM, Oliveira P. Implementation of the General Data Protection Regulation: A Survey in Health Clinics. In Rocha A, Cota MP, Lozano-Tello A, Goncalves R, editors, 13th Iberian Conference on Information Systems and Technologies. CISTI 2018. Los Alamitos: IEEE Computer Society Press. 2018. (Iberian Conference on Information Systems and Technologies, CISTI). doi: 10.23919/CISTI.2018.8399156