Privacy in electronic health records: a systematic mapping study

• Published in: Journal of public health Vol. 32; no. 3; pp. 435 - 454
• Main Authors: Tertulino, Rodrigo, Antunes, Nuno, Morais, Higor
• Format: Journal Article
• Language: English
• Published: Berlin/Heidelberg Springer Berlin Heidelberg 01.03.2024; Springer Nature B.V
• Subjects: Blockchain; Cryptography; Electronic health records; Electronic medical records; Epidemiology; Health Promotion and Disease Prevention; Interoperability; Literature reviews; Mapping; Medical records; Medicine; Medicine & Public Health; Privacy; Public Health; Review Article; Privacy; Security; Health; Electronic health record (EHR)
• ISSN: 2198-1833; 1613-2238
• DOI: 10.1007/s10389-022-01795-z

Main Electronic health record (EHR) applications are digital versions of paper-based patient health information. Traditionally, medical records are made on paper. However, nowadays, advances in information and communication technology have made it possible to change medical records from paper to EHR. Therefore, preserving user data privacy is extremely important in healthcare environments. The main challenges are providing ways to make EHR systems increasingly capable of ensuring data privacy and at the same time not compromising the performance and interoperability of these systems. Subject and methods This systematic mapping study intends to investigate the current research on security and privacy requirements in EHR systems and identify potential research gaps in the literature. The main challenges are providing ways to make EHR systems increasingly capable of ensuring data privacy, and at the same time, not compromising the performance and interoperability of these systems. Our research was carried out in the Scopus database, the largest database of abstracts and citations in the literature with peer review. Results We have collected 848 articles related to the area. After disambiguation and filtering, we selected 30 articles for analysis. The result of such an analysis provides a comprehensive view of current research. Conclusions We can highlight some relevant research possibilities. First, we noticed a growing interest in privacy in EHR research in the last 6 years. Second, blockchain has been used in many EHR systems as a solution to achieve data privacy. However, it is a challenge to maintain traceability by recording metadata that can be mapped to private data of the users applying a particular mapping function that can be hosted outside the blockchain. Finally, the lack of a systematic approach between EHR solutions and existing laws or policies leads to better strategies for developing a certification process for EHR systems.