skip to main content
10.1145/3411763.3443438acmconferencesArticle/Chapter ViewAbstractPublication PageschiConference Proceedingsconference-collections
extended-abstract

Towards Responsible Data Practices in Digital Health: A case study of an open source community's journey

Published: 08 May 2021 Publication History

Abstract

In recent years, privacy and data rights have garnered growing attention in public discourse, policy making, and scholarly research. New data protection laws are being rolled out globally to codify data rights and ensure individual control over how personal data is shared and used. This evolving landscape presents several opportunities and challenges for healthcare. In this case study, we outline a design research agenda that emerged from the practical needs of an open source community focused on digital health software for community health in low- and middle-income countries. We situate this case study in the global landscape of data regulations, and the call for responsible data practices that go above and beyond regulatory compliance. We share findings from the formative stages of our multi-stage design process, which include a scoping literature review and a reframing of institutional policies and procedures. A primary contribution of our case study is that it offers an example of the institutional ‘pre-work’ necessary to make sense of the complex data protection landscape, and to chart a path forward for designing software that better supports responsible data practices. This case study also articulates the important role for digital health designers and implementers in operationalizing patient data rights.

References

[1]
AI Now Institute, 2019. Open Letter to WFP re: Palantir Agreement. Retrieved October 14, 2020 from https://responsibledata.io/2019/02/08/open-letter-to-wfp-re-palantir-agreement/
[2]
Y. Anokwa, T. N. Smyth, and D. Ramachandran. 2009. Stories from the field: Reflections on HCI4D experiences. Information (2009). Retrieved from https://itidjournal.org/index.php/itid/article/view/427
[3]
April Moreno Arellano, Wenrui Dai, Shuang Wang, Xiaoqian Jiang, and Lucila Ohno-Machado. 2018. Privacy Policy and Technology in Biomedical Data Science. Annu Rev Biomed Data Sci 1, (July 2018), 115–129.
[4]
R. Armstrong, B. J. Hall, J. Doyle, and E. Waters. 2011. “Scoping the scope” of a cochrane review. Journal of Public Health 33, 147–150.
[5]
Susan Bull, Phaik Yeong Cheah, Spencer Denny, Irene Jao, Vicki Marsh, Laura Merson, Neena Shah More, Le Nguyen Thanh Nhan, David Osrin, Decha Tangseefa, Douglas Wassenaar, and Michael Parker. 2015. Best Practices for Ethical Sharing of Individual-Level Health Research Data From Low- and Middle-Income Settings. J. Empir. Res. Hum. Res. Ethics 10, 3 (July 2015), 302–313.
[6]
Marcelo Antonio de Carvalho Junior and Paulo Bandiera-Paiva. 2020. Strengthen Electronic Health Records System (EHR-S) Access-Control to Cope with GDPR Explicit Consent. J. Med. Syst. 44, 10 (August 2020), 172.
[7]
Marilyn Cech. Genetic Privacy in the “Big Biology” Era: The “Autonomous” Human Subject. Hastings Law Journal 70, 3 .
[8]
Spencer G. Denny, Blessing Silaigwana, Douglas Wassenaar, Susan Bull, and Michael Parker. 2015. Developing Ethical Practices for Public Health Research Data Sharing in South Africa: The Views and Experiences From a Diverse Sample of Research Stakeholders. J. Empir. Res. Hum. Res. Ethics 10, 3 (July 2015), 290–301.
[9]
Stefan Ducich and Jordan L. Fischer. 2018. The General Data Protection Regulation: What US-Based Companies Need to Know. Bus. Law. 74, (2018), 205.
[10]
Graham Greenleaf and Bertil Cottier. 2020. 2020 Ends a Decade of 62 New Data Privacy Laws. Retrieved October 13, 2020 from https://papers.ssrn.com/abstract=3572611
[11]
Isaac Holeman, Tara Patricia Cookson, and Claudia Pagliari. 2016. Digital technology for health sector governance in low and middle income countries: a scoping review. J. Glob. Health 6, 2 (December 2016), 020408.
[12]
Isaac Holeman and Dianna Kane. 2019. Human-centered design for global health equity. Inf Technol Dev 26, 3 (September 2019), 477–505.
[13]
Carly Jackson, Jennifer L. Gardy, Hedieh C. Shadiloo, and Diego S. Silva. 2019. Trust and the ethical challenges in the use of whole genome sequencing for tuberculosis surveillance: a qualitative study of stakeholder perspectives. BMC Med. Ethics 20, 1 (July 2019), 43.
[14]
Irene Jao, Francis Kombe, Salim Mwalukore, Susan Bull, Michael Parker, Dorcas Kamuya, Sassy Molyneux, and Vicki Marsh. 2015. Involving Research Stakeholders in Developing Policy on Sharing Public Health Research Data in Kenya: Views on Fair Process for Informed Consent, Access Oversight, and Community Engagement. J. Empir. Res. Hum. Res. Ethics 10, 3 (July 2015), 264–277.
[15]
M. Kay, J. Santos, and M. Takane. 2011. MHealth: New Horizons for Health Through Mobile Technologies. World Health Organization.
[16]
Mary Kirwan, Blanaid Mee, Niamh Clarke, Aoife Tanaka, Lino Manaloto, Emma Halpin, Una Gibbons, Ann Cullen, Sarah McGarrigle, Elisabeth M. Connolly, Kathleen Bennett, Eoin Gaffney, Ciaran Flanagan, Laura Tier, Richard Flavin, and Noel G. McElvaney. 2020. What GDPR and the Health Research Regulations (HRRs) mean for Ireland: “explicit consent”-a legal analysis. Ir. J. Med. Sci. (July 2020).
[17]
Alain B. Labrique, Lavanya Vasudevan, Erica Kochi, Robert Fabricant, and Garrett Mehl. 2013. mHealth innovations as health system strengthening tools: 12 common applications and a visual framework. Glob Health Sci Pract 1, 2 (August 2013), 160–171.
[18]
Laura Merson, Tran Viet Phong, Le Nguyen Thanh Nhan, Nguyen Thanh Dung, Ta Thi Dieu Ngan, Nguyen Van Kinh, Michael Parker, and Susan Bull. 2015. Trust, Respect, and Reciprocity: Informing Culturally Appropriate Data-Sharing Practice in Vietnam. J. Empir. Res. Hum. Res. Ethics 10, 3 (July 2015), 251–263.
[19]
Madeleine J. Murtagh, Mwenza T. Blell, Olly W. Butters, Lorraine Cowley, Edward S. Dove, Alissa Goodman, Rebecca L. Griggs, Alison Hall, Nina Hallowell, Meena Kumari, Massimo Mangino, Barbara Maughan, Melinda C. Mills, Joel T. Minion, Tom Murphy, Gillian Prior, Matthew Suderman, Susan M. Ring, Nina T. Rogers, Stephanie J. Roberts, Catherine Van der Straeten, Will Viney, Deborah Wiltshire, Andrew Wong, Neil Walker, and Paul R. Burton. 2018. Better governance, better access: practising responsible data sharing in the METADAC governance infrastructure. Hum. Genomics 12, 1 (April 2018), 24.
[20]
L. Nurgalieva, D. O'Callaghan, and G. Doherty. 2020. Security and Privacy of mHealth Applications: A Scoping Review. IEEE Access 8, (2020), 104247–104268.
[21]
Joyojeet Pal. 2017. CHI4Good or Good4CHI. In Proceedings of the 2017 CHI Conference Extended Abstracts on Human Factors in Computing Systems (CHI EA ’17), Association for Computing Machinery, New York, NY, USA, 709–721.
[22]
D. M. Parker, S. G. Pine, and Z. W. Ernst. 2018. Privacy and Informed Consent for Research in the Age of Big Data. Penn St. L. Rev. (2018). Retrieved from https://heinonline.org/hol-cgi-bin/get_pdf.cgi?handle=hein.journals/dlr123&section=26&casa_token=2kK621rtzUQAAAAA:Re4Ox51r6U9rDDPrfkNyrNrtWi9mJDu46JaBl_EoXr-_BHgGr33YnX_f-gWJR1fh_WbyeD8
[23]
Nassim Parvin and Anne Pollock. 2020. Unintended by Design: On the Political Uses of “Unintended Consequences.” Engaging Science, Technology, and Society 6, 0 (August 2020), 320–327.
[24]
Ed Pilkington. 2019. Google's secret cache of medical data includes names and full details of millions – whistleblower. The Guardian. Retrieved October 12, 2020 from http://www.theguardian.com/technology/2019/nov/12/google-medical-data-project-nightingale-secret-transfer-us-health-information
[25]
S. Raquel Ramos, Peter Gordon, Suzanne Bakken, and Rebecca Schnall. 2016. Sociotechnical Analysis of Health Information Exchange Consent Processes in an HIV Clinic. J. Assoc. Nurses AIDS Care 27, 6 (November 2016), 792–803.
[26]
Saskia C. Sanderson, Celine Lewis, Christine Patch, Melissa Hill, Maria Bitner-Glindzicz, and Lyn S. Chitty. 2019. Opening the “black box” of informed consent appointments for genome sequencing: a multisite observational study. Genet. Med. 21, 5 (May 2019), 1083–1091.
[27]
Nisha Shah, Victoria Coathup, Harriet Teare, Ian Forgie, Giuseppe Nicola Giordano, Tue Haldor Hansen, Lenka Groeneveld, Michelle Hudson, Ewan Pearson, Hartmut Ruetten, and Jane Kaye. 2019. Sharing data for future research-engaging participants’ views about data governance beyond the original project: a DIRECT Study. Genet. Med. 21, 5 (May 2019), 1131–1138.
[28]
Stewart Southey. 2019. Medical Wearables, Surveillance Capitalism And Global Health. Forbes Magazine (June 2019). Retrieved October 14, 2020 from https://www.forbes.com/sites/stewartsouthey/2019/06/30/medical-wearables-surveillance-capitalism-and-global-health/
[29]
Karen Spencer, Caroline Sanders, Edgar A. Whitley, David Lund, Jane Kaye, and William Gregory Dixon. 2016. Patient Perspectives on Sharing Anonymized Personal Health Data Using a Digital System for Dynamic Consent and Research Feedback: A Qualitative Study. J. Med. Internet Res. 18, 4 (April 2016), e66.
[30]
United Kingdom's Information Commissioner's Office. 2020. Guide to the General Data Protection Regulation (GDPR). ICO. Retrieved December 22, 2020 from https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/
[31]
United States Agency for International Development. 2019. Considerations for Using Data Responsibly at USAID. Retrieved October 13, 2020 from https://www.usaid.gov/responsibledata
[32]
Wikipedia contributors. 2020. Memorandum of understanding. Wikipedia, The Free Encyclopedia. Retrieved December 13, 2020 from https://en.wikipedia.org/w/index.php?title=Memorandum_of_understanding&oldid=991034861
[33]
Shoshana Zuboff. 2019. The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power: Barack Obama's Books of 2019. Profile Books.
[34]
2016. Regulation (EU) 2016/679. Retrieved October 1, 2020 from https://gdpr.eu/tag/gdpr/
[35]
2016. Recital 32 - Conditions for consent. Retrieved October 11, 2020 from https://gdpr.eu/recital-32-conditions-for-consent/
[36]
2020. Accepted Workshop Papers. Ethics in Design CSCW 2020 Workshop. Retrieved October 13, 2020 from https://ethicsindesignworkshop.wordpress.com/accepted-workshop-papers/
[37]
What is Responsible Data? Responsible Data Community. Retrieved October 1, 2020 from https://responsibledata.io/what-is-responsible-data/
[38]
Global Privacy Directory. OneTrust DataGuidance. Retrieved October 13, 2020 from https://www.dataguidance.com/laws
[39]
What We Value. Medic Mobile. Retrieved October 2, 2020 from https://medicmobile.org/blog/what-we-value
[40]
Community Health Toolkit Docs Site. Retrieved October 4, 2020 from https://docs.communityhealthtoolkit.org/

Cited By

View all

Recommendations

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences
CHI EA '21: Extended Abstracts of the 2021 CHI Conference on Human Factors in Computing Systems
May 2021
2965 pages
ISBN:9781450380959
DOI:10.1145/3411763
Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Sponsors

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 08 May 2021

Check for updates

Qualifiers

  • Extended-abstract
  • Research
  • Refereed limited

Funding Sources

  • The Rockefeller Foundation

Conference

CHI '21
Sponsor:

Acceptance Rates

Overall Acceptance Rate 6,164 of 23,696 submissions, 26%

Upcoming Conference

CHI 2025
ACM CHI Conference on Human Factors in Computing Systems
April 26 - May 1, 2025
Yokohama , Japan

Contributors

Other Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

  • Downloads (Last 12 months)30
  • Downloads (Last 6 weeks)3
Reflects downloads up to 29 Jan 2025

Other Metrics

Citations

Cited By

View all

View Options

Login options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

HTML Format

View this article in HTML Format.

HTML Format

Figures

Tables

Media

Share

Share

Share this Publication link

Share on social media