Privacy Preservation of Electronic Health Records in the Modern Era: A Systematic Survey

• Published in: ACM computing surveys Vol. 56; no. 8; pp. 1 - 37
• Main Authors: Nowrozy, Raza, Ahmed, Khandakar, Kayes, A. S. M., Wang, Hua, McIntosh, Timothy R.
• Format: Journal Article
• Language: English
• Published: New York, NY ACM 31.08.2024; Association for Computing Machinery
• Subjects: Access control; Computer science; Cryptography; Electronic health records; Information sharing; Literature reviews; Privacy; Security and privacy; Social aspects of security and privacy; Usability in security and privacy; privacy; security; electronic health records; Block chain; data sharing; confidentiality
• ISSN: 0360-0300; 1557-7341
• DOI: 10.1145/3653297

Building a secure and privacy-preserving health data sharing framework is a topic of great interest in the healthcare sector, but its success is subject to ensuring the privacy of user data. We clarified the definitions of privacy, confidentiality and security (PCS) because these three terms have been used interchangeably in the literature. We found that researchers and developers must address the differences of these three terms when developing electronic health record (EHR) solutions. We surveyed 130 studies on EHRs, privacy-preserving techniques, and tools that were published between 2012 and 2022, aiming to preserve the privacy of EHRs. The observations and findings were summarized with the help of the identified studies framed along the survey questions addressed in the literature review. Our findings suggested that the usage of access control, blockchain, cloud-based, and cryptography techniques is common for EHR data sharing. We summarized the commonly used strategies for preserving privacy that are implemented by various EHR tools. Additionally, we collated a comprehensive list of differences and similarities between PCS. Finally, we summarized the findings in a tabular form for all EHR tools and techniques and proposed a fusion of techniques to better preserve the PCS of EHRs.