Regional Health Information Platform Medical Information Privacy Evaluation Criteria Study

Research background: Regional health information platforms have been actively established across the country.The State Council issued the “Guiding Opinions on Promoting and Regulating the Development of Big Data Application for Health Care Medical” to encourage the open sharing of health care big data based on the regional health information platform.However,the regional health information platform management organizations lack experience in privacy security assessment,and are not dare or unwilling to openly share datas under the premise of taking risks.Research purpose: We defined what is private health information,then constructed an objective,scientific and operable medical information privacy security assessment standard for the regional health information platform,identified the risk points of the platform during data opening and sharing,and prevented problems before they occur.Nothing could be better than it become the access standard and supervision tool for the opening and sharing of data from the regional health information platform.Research content and methods:(1)We issued questionnaires and interviews with patients,doctors,and management personnel to grasp people's perceptions of information privacy,and combined the results of literature analysis to conduct expert consultation,so as to clarify the scope and connotation of medical privacy information;(2)Through in-depth interviews with the frontline personnel of the regional health information platform,ws clarified the business carried out by the platform and data transfer flow,combined the foreign countries data privacy protection experience,identified the risk points of health information privacy,constructed a set of security measures,and formed a preliminary draft of evaluation criteria;(3)Three rounds of Delphi survey and analytic hierarchy process,we confirmed final evaluation criteria draft and index weights;(4)Finally,we designed a empirical questionnaire,and chose five regional health information platforms,to test the reliability and validity of evaluation criteria,and gave platform privacy protection suggestions.Research results and conclusions: A set of health information privacy security assessment standard was constructed,including three first-level indicators,14 second-level indicators,and 46 third-level indicators.The consistency of Delphi's expert opinions is high,and the test-retest reliability,internal reliability,and content validity are high as well,which means the evaluation criteria is highly reliable.