Hostname: page-component-848d4c4894-wg55d Total loading time: 0 Render date: 2024-04-30T17:01:59.377Z Has data issue: false hasContentIssue false
  • English
  • Français

Health Data on the Go: Navigating Privacy Concerns with Wearable Technologies

Published online by Cambridge University Press:  17 November 2023

Varda Mone  and
Fayazullaeva Shakhlo
Get access Rights & Permissions [Opens in a new window]

Abstract

The escalating adoption of wearable technology for health data monitoring has led to the real-time aggregation of personal information. This phenomenon has fuelled heightened apprehensions about data security and privacy, given the storage, processing, and sharing of personal health data by corporations. Regulatory frameworks have been enacted to safeguard individual privacy rights, as exemplified by the General Data Protection Regulation (GDPR). This research paper, by Ms Varda Mone and Ms Fayazullaeva Shakhlo, offers an overview of extant literature on privacy apprehensions concerning wearable devices, conducting an exhaustive review to discern pivotal privacy issues and proffer prospective remedies. Specifically, the paper delineates the ensuing privacy concerns associated with wearables. Predominantly, wearables introduce security vulnerabilities that may facilitate the misappropriation, compromise, or revelation of delicate health data. The copious health information amassed by wearables can be potentially sold or divulged to external parties’ sans user cognisance or consent. Furthermore, the deployment of wearable technology harbours the potential for discriminatory practices against those with disabilities or chronic ailments. Additionally, apprehensions pertaining to privacy and surveillance stem from the capacity of wearable devices to monitor and trace an individual's movements and activities. To conclude, the paper deliberates on plausible measures to address privacy concerns pertaining to wearable devices, encompassing: a) Fortifying the security apparatus of wearable devices, b) Amplifying user autonomy over their health data, and c) Regulating the collection and utilisation of user health data by wearables. The paper asserts that the amelioration of these privacy concerns is indispensable for leveraging wearable technology's potential to enhance human well-being while ensuring the preservation of personal privacy.

Keywords

Data protectionGeneral Data Protection Regulation (GDPR)Wearable TechnologiesInternet of ThingsHealth Data
Type
International Perspectives
Information
Legal Information Management , Volume 23 , Issue 3 , September 2023 , pp. 179 - 188
Copyright
Copyright © The Author(s), 2023. Published by British and Irish Association of Law Librarians

Access options

Get access to the full version of this content by using one of the access options below. (Log in options will check for institutional or personal access. Content may require purchase if you do not have access.)

References

Footnotes

1 Bajpai, Nirupam, and Manisha Wadhwa. India's National Digital Health Mission. No. 36. ICT India Working Paper, 2020.

2 Metcalf, D., Milliard, S. T., Gomez, M., & Schwartz, M. (2016). Wearables and the internet of things for health: Wearable, interconnected devices promise more efficient and comprehensive health care. IEEE pulse, 7(5), 35-39CrossRefGoogle ScholarPubMed.

3 Marchant, G. (2020). The brain on your wrist: the legal implications of wearable artificial intelligence. Sci Tech Lawyer, 17(1), 16Google Scholar.

4 Alharbi, R., & Almagwashi, H. (2019, August). The Privacy requirments for wearable IoT devices in healthcare domain. In 2019 7th International Conference on Future Internet of Things and Cloud Workshops (FiCloudW) (pp. 18-25). IEEE.

5 Manogaran, G., Thota, C., Lopez, D., & Sundarasekar, R. (2017). Big data security intelligence for healthcare industry 4.0. In Cybersecurity for industry 4.0 (pp. 103-126). Springer, Cham.

6 Nedungadi, P., Jayakumar, A. & Raman, R. Personalized Health Monitoring System for Managing Well-Being in Rural Areas. J Med Syst 42, 22 (2018). https://doi.org/10.1007/s10916-017-0854-9

7 Wencheng Sun, Zhiping Cai,Yangyang Li,Fang Liu,Shengqun Fang,and Guoyan Wang (2018) “Security and Privacy in the Medical Internet of Things: A Review”, Secureity and Communication Networks, Hindawi.

8 Tu, Jiaobing, and Wei Gao. “Ethical considerations of wearable technologies in human research.” Advanced healthcare materials 10.17 (2021): 2100127.

9 Segura Anaya, L. H., Alsadoon, A., Costadopoulos, N., & Prasad, P. W. C. (2018). Ethical implications of user perceptions of wearable devices. Science and engineering ethics, 24, 1-28

10 Ferreira, J. J., Fernandes, C. I., Rammal, H. G., & Veiga, P. M. (2021). Wearable technology and consumer interaction: A systematic review and research agenda. Computers in human behavior, 118, 106710.

11 Brönneke, J. B., Müller, J., Mouratis, K., Hagen, J., & Stern, A. D. (2021). Regulatory, legal, and market aspects of smart wearables for cardiac monitoring. Sensors, 21(14), 4937.

12 Parziale A, Mascalzoni D. Digital Biomarkers in Psychiatric Research: Data Protection Qualifications in a Complex Ecosystem. Front Psychiatry. 2022 Jun. doi: 10.3389/fpsyt.2022.873392.

13 Williams, P. A., & McCauley, V. (2016, December). Always connected: The security challenges of the healthcare Internet of Things. In 2016 IEEE 3rd World Forum on Internet of Things (WF-IoT) (pp. 30-35). IEEE.

14 Chawla, N. (2020). AI, IOT and wearable technology for smart healthcare? A review. Int J Green Energy, 7(1), 9-13.

15 Hiremath, S., Yang, G., & Mankodiya, K. (2014, November). Wearable Internet of Things: Concept, architectural components and promises for person-centered healthcare. In 2014 4th International Conference on Wireless Mobile Communication and Healthcare-Transforming Healthcare Through Innovations in Mobile and Wireless Technologies (MOBIHEALTH) (pp. 304-307). IEEE.

16 Karunarathne, S. M., Saxena, N., & Khan, M. K. (2021). Security and privacy in IoT smart healthcare. IEEE Internet Computing, 25(4), 37-48.

17 Minbaleev, A. V., Nikolskaia, K. Y., & Zhernova, V. M. (2020, December). Legal Enforcement of Cybersecurity of Wearable Mobile Devices in Healthcare. In 2nd International Scientific and Practical Conference on Digital Economy (ISCDE 2020) (pp. 674-678). Atlantis Press.

18 Alvarez, S. L., Baller, S. L., & Walton, A. (2021). Who Owns Your Health Data? Two Interventions Addressing Data of Wearable Health Devices among Young Adults and Future Health Clinicians. Journal of Consumer Health on the Internet, 25(1), 35-49.

19 Anne T. McKenna, Amy C. Gaudion, and Jenni L. Evans, The Role of Satellites and Smart Devices: Data Surprises and Security, Privacy, and Regulatory Challenges, 123 Penn St. L. Rev. 3 (2019)

20 Mahajan, N., Garg, S., Pandita, S., & Sehgal, G. (2022). Smart Healthcare and Digitalization: Technological and Cybersecurity Challenges. In Cross-Industry Applications of Cyber Security Frameworks (pp. 124-147). IGI Global.

21 <https://apnews.com/d29c724e1d72460fbf7c2e999992d258/Pentagon-restricts-use-of-fitness-trackers,-other-devices?utm_source=Twitter&utm_medium=AP_Politics&utm_campaign=SocialFlow> (Accessed on 11 Jan 2023)

22 <www.washingtonpost.com/technology/2022/09/22/health-apps-privacy/> (Accessed on 15 Dec 2022)

23 <www.theverge.com/2018/3/29/17177848/under-armour-myfitnesspal-data-breach-150-million-accounts-security> (Accessed on 25 Jan 2023)

24 <www.zdnet.com/article/security-flaws-in-childrens-smartwatches-make-them-vulnerable-to-hackers/> (Accessed on 11 Nov 2022)

25 Lachman, K. (2019). Smart healthcare systems, wearable sensor devices, and patient data security. American Journal of Medical Research, 6(1), 43-49.

26 Krajcsik, J. R. (2022). The State of Health Data Privacy, and the Growth of Wearables and Wellness Apps (Doctoral dissertation, University of Pittsburgh).

27 Ioannidou, I., & Sklavos, N. (2021). On general data protection regulation vulnerabilities and privacy issues, for wearable devices and fitness tracking applications. Cryptography, 5(4), 29.

28 Art. 7 GDPR: Conditions for consent <https://gdpr-info.eu/art-7-gdpr/>

29 Art. 6(1)F “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”

30 Art. 9 GDPR: Processing of special categories of personal data <https://gdpr-info.eu/art-9-gdpr/>

31 Art. 5 GDPR: Principles relating to processing of personal data <https://gdpr-info.eu/art-5-gdpr/>

32 Chapter 3 GDPR: Rights of the data subject <https://gdpr-info.eu/chapter-3/>

33 Art. 32 GDPR: Security of processing <https://gdpr-info.eu/art-32-gdpr/>

34 Art. 33 GDPR: Notification of a personal data breach to the supervisory authority <https://gdpr-info.eu/art-33-gdpr/>

35 Jayapal, C., Shree, S. K., Kumar, R. L., & Muthukumar, S. (2021, October). Challenges in Wearable Technology. In 2021 International Conference on Advancements in Electrical, Electronics, Communication, Computing and Automation (ICAECA) (pp. 1-6). IEEE.

36 Jhajharia, S., Pal, S. K., & Verma, S. (2014). Wearable computing and its application. International Journal of Computer Science and Information Technologies, 5(4), 5700-5704.

37 Schukat, M., McCaldin, D., Wang, K., Schreier, G., Lovell, N. H., Marschollek, M., & Redmond, S. J. (2016). Unintended consequences of wearable sensor use in healthcare. Yearbook of medical informatics, 25(01), 73-86Google Scholar.

38 Sridhar, A. P., PV, L., & Mohana, T. K. (2020). Wearable Devices in Healthcare 4.0: Effects, Trends and Challenges.

39 Kapoor, V., Singh, R., Reddy, R., & Churi, P. (2020, April). Privacy issues in wearable technology: An intrinsic review. In Proceedings of the International Conference on Innovative Computing & Communications (ICICC).

40 Sam, M. F. M., Ismail, A. F. M. F., Bakar, K. A., Ahamat, A., & Qureshi, M. I. (2022). The Effectiveness of IoT Based Wearable Devices and Potential Cybersecurity Risks: A Systematic Literature Review from the Last Decade. International Journal of Online & Biomedical Engineering, 18(9)Google Scholar.

41 Ioannidou, I., & Sklavos, N. (2021). On General Data Protection Regulation Vulnerabilities and Privacy Issues, for Wearable Devices and Fitness Tracking Applications. Cryptography, 5(4), 29CrossRefGoogle Scholar.