医疗机构App个人信息合规性评估研究与治理对策  

Research on the assessment of medical institutions Apps' personal information compliance and its countermeasures

作　　者：朱正 张春芳 孟晓[2] 桑戟南 ZHU Zheng;ZHANG Chunfang;MENG Xiao;SANG Jinan(Beijing Health Big Data and Policy Research Center,Beijing 101160,China;China Software Evaluation Center)

机构地区：[1]北京市卫生健康大数据与政策研究中心,北京101160 [2]中国软件评测中心

出　　处：《中国数字医学》2024年第12期34-38,共5页China Digital Medicine

摘　　要：医疗机构App作为采集患者个人信息的前端,是医疗机构进行个人信息保护实践的良好抓手。以隐私政策合规性、违规收集、违规传输和存储、违规加工和使用、违规公开和提供、违规删除和其他杂项等7个方面对30家医疗机构App的数据评估为基础,分析了医疗机构App在个人信息保护方面存在的问题,并提出进一步规范医疗机构App个人信息保护的建议。As the front-end of collecting patients' personal information,medical institution Apps serve as a good starting point for medical institutions to carry out personal information protection.Based on the data assessment of 30 medical institution Apps from 7 aspects,including privacy policy compliance,unauthorized collection,unauthorized transmission and storage,unauthorized processing and use,unauthorized transmission and storage,unauthorized processing and use,illegal disclosure and provision,illegal deletion and other miscellaneous aspects,this paper analyzes the problems existing in the personal information protection of medical institution Apps and proposes suggestions for further standardization of personal information protection.

关 键 词：医疗机构App 数据安全 个人信息处理 风险监管 

分 类 号：R319[医药卫生—基础医学] R197