Innovations in Information Technology has paved the way for easier and more efficient online health data sharing and transfer. However, this has also led to data oriented challenges around privacy, authentication and authorisation. While transfer of sensitive health as well as personal data between organizations and countries requires high level of protection and privacy, most people involved in business processes in the service industry, especially one as complex as healthcare, are generally oblivious of the legal responsibilities and implications of data privacy regulations. This chapter presents the legal and business analysis based on a use case that deals with exchange of mHealth data of an aged care facility across countries. A conceptual framework is developed for legal and business analysis that can be applied to analyse similar use cases. The conceptual framework involves three elements: actors, activities and impact of activities on factors such as risk, cost, quality and productivity. Actors can be classified as subjects, controllers, processors, third party or third country. They can be individuals or organisations. Activities can be categorised as goals, touch -points and resources. This framework is applied to legal and business analysis as summarised in the next two paragraphs.

Chapter Contents:

• 22.1 Executive summary
• 22.2 Conceptual frameworks
• 22.2.1 Identifying business process components for e-Authentication and e-Authorisation
• 22.2.2 Data type and assurance level
• 22.2.3 Application of the business process model and AU2EU legal framework to use cases
• 22.3 Regulatory framework for the AAL use case
• 22.3.1 European approach towards e-Signatures
• 22.3.1.1 Market fragmentation
• 22.3.1.2 Interoperability challenges
• 22.3.1.3 Reliability check
• 22.3.1.4 High costs for cross-border legal compliance
• 22.3.2 Legal keywords and definitions
• 22.3.3 Identifying and mapping legal actors to corresponding roles and regulations: legal framework
• 22.3.3.1 Legal framework
• 22.4 Use case: eHealth/ambient-assisted living
• 22.4.1 Use case: ambient assisted living (AAL) efficient care coordination
• 22.4.1.1 Business analysis
• 22.4.1.2 Legal analysis
• 22.5 Conclusion
• Acknowledgement
• References

Inspec keywords: business data processing; medical information systems; mobile computing; geriatrics; law

Other keywords: legal framework; data privacy regulations; online health data sharing; information technology; business analysis; business framework; online health data transfer; legal analysis; mHealth data; aged care facility

Subjects: Legal aspects of computing; Medical administration; Mobile, ubiquitous and pervasive computing