Data Protection Aspects Research Articles

Some legal aspects of personal data protection in the world—experience for Vietnam

Some legal aspects of personal data protection in the world—experience for Vietnam

Data Leakage of the Indonesian Elections Commission in Legal Aspects of Personal Data Protection

Hackers illegally accessed the Indonesian General Elections Commission’s (KPU) voter data system to collect voter data to sell to third parties. The regulation requires accountability for voter data leakage to protect people’s privacy rights in Indonesia’s personal data protection concept. Legal analysis of the modus operandi of personal data sales cases results in patterns of information system vulnerabilities, which can then be used to prevent personal data leakage and improve voter data protection in Indonesian elections. One of the reasons for passing the personal data protection law is the rampant cases of confidential data leakage that occur in government and private institutions in Indonesia. Hackers of voter data systems aim to profit from personal data sold to third parties. The role of the cybersecurity task force team needs to be improved with more concrete arrangements in law enforcement, and mitigating voter data leakage can provide legitimacy for the implementation of credible, reliable, and professional elections in Indonesia. Establishing the task force will optimize the application of voter data systems in conducting general elections in Indonesia and improve personal data protection.

Data Protection Aspects of the Use of Artificial Intelligence — Initial overview of the intersection between GDPR and AI Act

Abstract AI systems thrive on the processing of large amounts of data. As AI-supported technologies become more and more widespread, questions concerning data protection aspects arise increasingly. This primarily concerns the input of personal data into AI systems, which is conceivable in a variety of scenarios, for example in the workplace for job applications or evaluations, by authorities when processing applications, in the judiciary or at schools and universities when assessing examinations. This article aims to analyse how the use of AI systems is affected by data protection law. To this end, particularly relevant provisions of the GDPR are selected and analysed for their special features in connection with AI systems. In addition to the GDPR, the AI Act will also be analysed.

Keeping medical information safe and confidential: a qualitative study on perceptions of Israeli physicians

BackgroundPatients expect their information to remain confidential, and physicians have a legal and ethical obligation to keep it this way. Confidentiality is not just a legal requirement but a crucial element in establishing trust between patients and healthcare providers. Patients must feel confident that their personal and medical information is kept confidential and shared only with those who need to know. Previous studies have primarily concentrated on patients’ perceptions of medical confidentiality, data privacy, and data protection issues. However, research on the practical practices and perceptions of medical confidentiality among hospital physicians is scant, underscoring the need for a deeper understanding of this critical issue.MethodsThrough qualitative methods and as part of a large-scale study on aspects of patient dignity and responsiveness in Israel, physicians shared their views and practices on managing medical information.ResultsThe study revealed the practical challenges physicians face in upholding various aspects of data protection within hospital settings. These challenges, strategies, and deviations from data protection principles that physicians discussed are of significant practical relevance. The importance of patient consent and the practical measures for safeguarding patient information were also highlighted. While physicians acknowledged the importance of protecting patient information, they also grappled with the realities of doing so in a complex healthcare environment. In future healthcare policies, it is critical to ensure robust measures are in place to safeguard and uphold medical confidentiality. These can include specific measures to increase compliance, such as regularly monitoring compliance with confidentiality policies, producing safe and anonymous channels to voice concerns, and enforcing consequences for any breaches to ensure accountability.ConclusionsWhile protecting medical information has emerged as an important goal, it is equally crucial to strike a balance between the need to share information to advance and provide quality medical care. Physicians and policymakers must navigate this delicate balance. Additionally, organizations should strengthen compliance to enhance their monitoring and enforcement of confidentiality policies. Ineffective implementation of medical confidentiality leads to theoretical guidelines that do not translate effectively into practice.

Human-centered AI development in practice—insights from a multidisciplinary approach

Industry 5.0 will focus on human-centered digitalization and put people at the center of manufacturing. To achieve this, it is necessary to consider employees throughout the transformation process. For this purpose, a practical approach to human-centered AI integration based on the Design Science Research method is presented in this article. The main requirements of the approach were evaluated in interviews with ten pilot companies, especially SMEs. The practical procedure was then examined in more detail for three application examples. The results show that there is still a lack of a uniform approach regarding the involvement of employees. Information on AI projects often reach those affected only during implementation. Even though the interdisciplinary approach is understood as a feasible approach for holistic AI development and implementation, there is still a lack of practical guidelines for adopting this multi-perspective approach. This work provides an initial starting point for a practice-oriented approach to the introduction of human-centered AI.Practical Relevance: As a result of exponential digitalization and the associated in-depth use of partially to fully automated technologies such as AI, collaboration between humans and machines is becoming increasingly important. It is essential for companies to work according to human-centered approaches to consider motivation and satisfaction as well as aspects of data protection and personal protection for employees. The necessity for companies to adopt a human-centric and sustainable approach to digitalization will intensify in coming years. The work addresses the needs for operationalization of research findings for companies. Thus, the proposed guidelines can be understood as an approach to practical knowledge transfer from science to industry.

A dynamic symmetric key generation at wireless link layer: information-theoretic perspectives

The expansion of wireless communication introduces security vulnerabilities, emphasizing the essential need for secure systems that prioritize confidentiality, integrity, and other key aspects of data protection. Since computational security acknowledges the possibility of breaches when adequate computational resources are available, that is why information-theoretic security is being explored, which suggests the existence of unbreakable cryptographic systems even in the presence of limitless processing power. Secret key exchange has traditionally relied on RSA or DH protocols, but researchers are now exploring innovative approaches for sharing secret keys among wireless network devices, leveraging physical or link layer characteristics. This research seeks to revolutionize secure multi-party key acquisition in wireless networks, capitalizing on information-theoretic security and collaborative data extraction. The proposed secret key generation framework comprehensively organizes and explains the information-theoretic aspects of secret key generation within the lower layers of wireless networks, especially the link layer, proposes a novel information-theoretic SKG framework for the dynamic acquisition of symmetric secret keys, and responds to contemporary information security challenges by relying on information-theory principles rather than vulnerable mathematical relationships in the post-quantum period. A new cryptographic key can be generated using a straightforward method, and when it is combined (XORed) with the previous key, it creates a continuously changing secret for encryption and decryption. This approach enhances security because, as attackers attempt to break the encryption, the system generates fresh, dynamic keys, making it progressively more challenging for them to succeed. The research work in question integrates key renewal, or how often keys are updated (dynamic keys), with a security off-period. It introduces a framework for determining the best key refresh rate based on the anticipated rate at which keys might be compromised. Furthermore, the proposed framework is scalable, allowing new nodes to quickly join the existing network. The system was tested with multiple nodes equipped with IEEE 802.11 interfaces, which were set in monitor mode to capture frames at the link layer. Nodes map their on-time frames onto their Bloom filters. Nodes exchange these Bloom filters in a feedback mechanism. Nodes extract those frames from their .pcap files, which are present in all Bloom filters; these are common frames among all nodes. These frames are used to form a shared secret that is passed to HMAC Key Derivation Function by each node to acquire the final encryption key of the required length. The validation of this encryption key is performed using a simple challenge-response protocol; upon successful validation, encrypted communication begins. Otherwise, the key generation process is restarted.

Mechanisms of interaction between banking institutions and aviation enterprises

It is shown that the main mechanisms of interaction between banks and aviation enterprises are: loans, leasing, collateral financing, risk hedging, project financing, financial consultations and services, factoring, guarantees and insurance. The global aerospace market has been proven to have significant growth potential due to an increase in global GDP, growth in global air traffic and record numbers of new aircraft orders. Innovation, efficiency gains and the development of new markets contribute to the sector's long-term positive outlook. It is shown that the aviation industry is subject to strict regulation at the national and international levels, including requirements for safety, ecology, product quality, data protection and many other aspects. Failure to comply with these requirements can result in serious legal consequences, financial loss and reputational damage. Long supply chains have been found to be an integral part of the aviation industry, ensuring the supply of components and materials for aircraft manufacturing. They have their own advantages and challenges that require effective management and coordination. The use of modern technologies, the development of partnership relations and strategic risk management contribute to increasing the efficiency and sustainability of these chains. It has been determined that the management of the risks of execution of key contracts is extremely important for aviation enterprises. Implementation of effective risk management strategies helps reduce the possibility of problems, ensure timely and high-quality fulfillment of obligations to customers, as well as maintain financial stability and competitiveness in the market. It has been proven that the interaction of banks and aviation companies brings numerous advantages to both parties. Aviation enterprises get access to the necessary financing, risk management and consulting services, which contributes to their development and increased efficiency. Banks, in turn, expand their customer base, increase profitability, develop new products and strengthen their reputation. Such cooperation is an important component of the success of both the aviation industry and the banking sector.

Chat messenger use in the care of patients with Parkinson's disease

The demand for chat messaging apps for communication between physicians, therapists and patients is increasing. The expectations for this form of communication and uncertainties regarding introduction and use are heterogeneous. The implementation of chat messengers in the care of patients with Parkinson's disease should be facilitated by recommendations regarding introduction and usage. Semi-structured interviews with neurologists and physiotherapists were conducted to capture the expectations and needs regarding the use of chat messengers. From the data analysis, recommendations were derived. The expectations for technical functionality exceeded the chat messenger functions. This concerns, e.g., the connection of the chat messenger to the electronic patient file. There is agreat deal of uncertainty, particularly when it comes to the applicable General Data Protection Regulations (GDPR). The recommendations relating to the use of chat messengers, data protection aspects, the design of such tools and methodological considerations can help to implement the tool as an additional communication channel. Practical recommendations regarding functionality, the use of chat messengers in everyday life and in relation to data protection are derived from the results. By improving knowledge, physicians and therapists can contribute to the successful establishment of chat messengers as an additional communication tool.

Psychiatrists’ perceptions of conditions and consequences associated with the implementation of open notes: qualitative investigation

ObjectiveIn a growing list of countries, patients are granted access to their clinical notes (“open notes”) as part of their online record access. Especially in the field of mental health, open notes remain controversial with some clinicians perceiving open notes as a tool for improving therapeutic outcomes by increasing patient involvement, while others fear that patients might experience psychological distress and perceived stigmatization, particularly when reading clinicians’ notes. More research is needed to optimize the benefits and mitigate the risks.MethodsUsing a qualitative research design, we conducted semi-structured interviews with psychiatrists practicing in Germany, to explore what conditions they believe need to be in place to ensure successful implementation of open notes in psychiatric practice as well as expected subsequent changes to their workload and treatment outcomes. Data were analyzed using thematic analysis.ResultsWe interviewed 18 psychiatrists; interviewees believed four key conditions needed to be in place prior to implementation of open notes including careful consideration of (1) diagnoses and symptom severity, (2) the availability of additional time for writing clinical notes and discussing them with patients, (3) available resources and system compatibility, and (4) legal and data protection aspects. As a result of introducing open notes, interviewees expected changes in documentation, treatment processes, and doctor-physician interaction. While open notes were expected to improve transparency and trust, participants anticipated negative unintended consequences including the risk of deteriorating therapeutic relationships due to note access-related misunderstandings and conflicts.ConclusionPsychiatrists practiced in Germany where open notes have not yet been established as part of the healthcare data infrastructure. Interviewees were supportive of open notes but had some reservations. They found open notes to be generally beneficial but anticipated effects to vary depending on patient characteristics. Clear guidelines for managing access, time constraints, usability, and privacy are crucial. Open notes were perceived to increase transparency and patient involvement but were also believed to raise issues of stigmatization and conflicts.

Analisis Eksplorasi Strategi Perusahaan Dalam Menghadapi Disrupsi Digital Di Era Industri 6.0: Studi Kasus Pada PT. Aneka Tambang Tbk

This qualitative research explores the strategies implemented by PT Aneka Tambang Tbk (ANTAM) in facing digital disruption in the industrial era 6.0. By using a case study approach and involving 10-15 key participants from ANTAM management, this research reveals the company's comprehensive digital transformation efforts. Data collection methods include in-depth interviews, participant observation, document analysis, and literature review. The main strategies implemented include the implementation of digital technology such as the Internet of Things (IoT), big data analytics, automation and robotics in mining operations; digital human resource development; transformation of organizational culture that supports innovation; as well as strategic partnerships and collaborations with technology companies, start-ups and research institutions. ANTAM also pays great attention to aspects of cyber security and data protection. The research results show that digital transformation has a positive impact on increasing operational efficiency, productivity, cost savings, work safety, new product development, as well as the competitiveness and sustainability of ANTAM's business. This research provides valuable insights for companies in the mining sector and related industries in formulating effective digital transformation strategies.

The protection of personal data according to the civil and criminal Moroccan laws in light of jurisprudence

With the growing dependence on information technology for personal data processing and the diverse activities requiring data use, risks to privacy have increased. Violations are more prevalent in the computer age. In this regard, the study of the protection of personal data, as formulated, has both theoretical and practical importance. This paper aims to analyse two aspects of personal data protection within Moroccan law. It encompasses civil protection based on civil liability rules, and penal protection as guaranteed by the Moroccan Penal Code. Taking into account Moroccan judicial practice and jurisprudence in this field and incorporating insights from over 28 relevant judgments, this analysis will be conducted independently of the provisions of Law No. 09-08 governing privacy and data protection. It also considers the widespread use of the Civil Code and Penal Code by Moroccan courts as foundations in matters involving personal data protection.

Position statement of the GMA committee "teaching evaluation".

The evaluation of teaching can be an essential driver for curriculum development. Instruments for teaching evaluation are not only used for the purpose of quality assurance but also in the context of medical education research. Therefore, they must meet the common requirements for reliability and validity. This position paper from the GMA Teaching Evaluation Committee discusses strategic and methodological aspects of evaluation in the context of undergraduate medical education and related courses; and formulates recommendations for the further development of evaluation. First, a four-step approach to the design and implementation of evaluations is presented, then methodological and practical aspects are discussed in more detail. The focus here is on target and confounding variables, survey instruments as well as aspects of implementation and data protection. Finally, possible consequences from evaluation data for the four dimensions of teaching quality (structural and procedural aspects, teachers and outcomes) are discussed.

Authentication Authorization and Security Issues in Cloud Computing

Abstract: Cloud Computing is basically a technology used to store and access data and Cloud Computing is a technology that is growing day by day. One of the reasons for the growth of this technology today is that it can be accessed from anywhere with just a computer device and the internet. But here lies the security risk of user data. so, it is necessary to ensure the security of information for the user. user data security can be ensured through the authentication and authorization process. Allows the user to access the cloud platform after verifying the user's identity through an authentication and authorization process. This authentication and authorization method can reduce the data risk of cloud computing users. In this paper, we have tried to show the data risk aspects of cloud computing users and the possible solutions. We will also try to describe the data protection and security aspects of cloud computing.

A Study on Data Protection in Cloud Environment

Data protection in the online environment pertains to the safeguarding of sensitive or important data kept, analyzed, or sent in cloud-based systems. It entails assuring data confidentiality, integrity, and availability, as well as adhering to appropriate data protection requirements. In a nutshell, cloud data protection seeks to protect data against unauthorized access, deletion, or breaches while retaining its accuracy and accessible to authorized users. This is accomplished in the cloud environment using various security measures, encryption approaches, access controls, disaster recovery and backup processes, and constant monitoring and threat detection. The research significance of data protection in the cloud environment can be summarized as follows: Security and Privacy: Research in data protection in the cloud helps address the security and privacy concerns associated with storing and processing sensitive data in cloud-based systems. It explores and develops advanced security mechanisms, encryption techniques, and access controls to protect data from unauthorized access, data breaches, and privacy violations. Trust and Confidence: Research in data protection contributes to building trust and confidence in cloud computing. By developing robust security solutions and demonstrating their effectiveness, research helps alleviate concerns about data security and privacy, fostering greater adoption of cloud services by organizations and individuals. Compliance and Regulations: Cloud computing often involves compliance with data protection regulations and industry standards. Research in this area explores the legal and regulatory aspects of data protection in the cloud and helps organizations understand and comply with relevant requirements. Data Resilience and Recovery: Research in data protection focuses on ensuring data resilience and developing efficient data recovery mechanisms in the cloud. It explores backup and disaster recovery strategies, data replication techniques, and data loss prevention methods to minimize downtime, recover data promptly, and maintain business continuity in the event of system failures or disasters. By addressing these research areas, studies on data protection in the cloud environment contribute to enhancing security, privacy, compliance, and resilience in cloud computing. They provide valuable insights, practical solutions, and guidelines for organizations and service providers to protect data effectively and maintain the trust of users in cloud-based services. The weighted product method approach is commonly used to choose the best data protection in cloud environment. CCSS1, CCSS2, CCSS3, CCSS4, CCSS5 data visibility, data integrity, Maintains compliance, Data security, Data storage. From the result it is seen that CCSS2 got highest rank whereas CCSS5 got lowest rank According to the results, CCSS2 was ranked first.

Utilization of video consultation in cardiovascular lipid treatment

Video consultation is a possibility for physician-patient communication independent of the location; however, only limited information is available for the possibility of sole use since 2018. After the implementation of video consultation (Viomedi) in lipid consultations at the Medical University Mainz, the patients in the first quarter of 2022 were assessed depending on the possibility, suitability and readiness to participate. Included were patients under lipid management and long COVID patients. After treatment an online survey was carried out on the utilization and appraisal. Of the 134 patients 29.1% were inclusively treated (3 refusals). All subjects (16 replies) reported having managed (very) well. Advantages were seen in counselling and follow-up. Problems were feared with respect to technology and possible disorders. Data protection aspects played a subordinate role. In comparison to telephone calls, a significant improvement in the physician-patient relationship (p-value = 0.00027), the quality of treatment and information (p-value both = 0.00044), the access to care (p-value = 0.0053) and the communication (p-value = 0.021) was assumed. An improvement in access to care (p-value = 0.021) and the quality of information (p-value = 0.034) was seen in comparison to personal contact. The main problems were a lack of experience, technical requirements, technical problems and unpunctuality of the practitioner. The flexibility, low effort and the pleasant consultation were all praised. All subjects wanted to use the video consultation again. Video consultation can represent a supplement to treatment of patients under lipid management. The correct use requires exact planning and further research.

The transformative effect of artificial intelligence in hospitals : The focus is on the individual

Rapid advances in digital technology and the promising potential of artificial intelligence (AI) are changing our everyday lives and have already impacted on hospital procedures. The use of AI applications, in particular, enables awide range of possible uses and has considerable potential for improving medical and nursing care. In radiological diagnostics, for example, there are already many well-researched applications for AI-based image evaluation. In this article further AI developments are presented, which can help to relieve medical staff in order to create more time for direct patient care. In addition, essential aspects regarding the development and transfer of AI-based applications are highlighted. It is crucial that the integration of AI into medical practice is carried out with the utmost care and prudence. Data protection and ethical aspects need to be considered and respected at all times. Ensuring the reliability and integrity of AI systems is essential to earn the trust of both patients and healthcare professionals. Acomprehensive inspection for possible bias within the underlying data and algorithms is indispensable. In this field of tension between promising possibilities and ethical challenges, the digital transformation in medicine and care can be designed to increase patient safety and to relieve staff.

Aspects of Personal Data Protection According to International Law

This journal investigates aspects of personal data protection in the context of international law. With the development of information technology and globalization, cross-border exchange of personal data has become commonplace. However, the challenge that arises along with this is how to protect individual personal data from potential misuse by various parties, including the state and private companies. This journal describes developments in international law related to personal data protection, including key legal instruments such as the Council of Europe Convention on Human Rights and the Protection of Personal Data, as well as the role of international organizations such as the United Nations in addressing this issue. This research also highlights the differences in approaches that exist in various countries in regulating personal data protection. In addition, this journal reviews the practical challenges of implementing personal data protection principles in a global context, including issues of data security, cross-border transfer of data, and comparison of applicable regulations in various jurisdictions. Furthermore, this journal evaluates the impact of personal data protection policies on international trade, technological innovation, and human rights. This research provides in-depth insight into the complexity of personal data protection issues in international law and the importance of global regulatory harmonization to maintain a balance between individual protection and technological developments

Foreign experience of personal data protection in social networks

The article analyzes the protection of personal data based on foreign experience. Social networking has been identified as one of the most prominent cultural phenomena to emerge in the Web 2.0 era. They keep users connected and facilitate the exchange of information between them.
 The European Union has adopted a new personal data protection system called the General Data Protection Regulation (GDPR). Its main goals include providing individuals with tools to control their personal data, implementing modern standards for the protection of personal information, developing the digital space of the European Union to safeguard personal data, ensuring strict compliance by all parties, and providing legal support for the international transfer of personal information.
 United States legislative documents related to aspects of data protection and privacy were analyzed, namely: California Consumer Privacy Act (CCPA); Children’s Online Privacy Protection Act (COPPA); Health Insurance Portability and Accountability Act (HIPAA); State data breach notification laws.
 It is noted that China has a comprehensive legal framework that regulates the protection of personal data, and includes the following legal acts: Personal Information Protection Law (PIPL) and Data Security Law (DSL).
 Conclusions were made that the urgency and importance of protecting personal data in social networks is due to rapid technological progress, the growth of cyber security threats and the spread of these platforms. By protecting personal data, people can maintain privacy, prevent abuse, maintain user trust, reduce risk, and comply with legal obligations. The issue of ensuring mobility and interoperability in social networks gives particular importance to the protection of personal data, as it relates to this particular data, and not just to technology, as it may be in the telecommunications sector. This requires additional thought and measures to ensure privacy and data security. Therefore, when developing legal protection mechanisms for online social networks, it is necessary to take into account and solve problems related to the protection of personal data.

GDPR-compliant AI-based automated decision-making in the world of work

Artificial Intelligence is spreading fast in our everyday life and the world of work is no exception. AI is increasingly shaping the employment context: such emerging areas are augmented and automated decision-making. As AI-based decision-making is fuelled by personal data, compliance with data protection frameworks is inevitable. Even though automated decision-making is already addressed by the European norms on data protection – especially the GDPR –, their application in the world of work raises specific questions. The paper examines, in the light of the ‘general’ data protection background, what specific data protection challenges are raised in the field of AI-based automated decision-making in the context of employment. As a result of the research, the paper provides a detailed overview on the European legal framework on the data protection aspects of AI-based automated decision-making in the employment context. It identifies the main challenges, such as the applicability of the existing legal framework to the current use-cases and the specific questions relating to the lawful bases in the world of work, and provides guidelines on how to address these challenges.

Management of Onsite and Remote Communication in Oncology Hospitals: Data Protection in an Era of Rapid Technological Advances.

Modern communication and information technologies are rapidly being deployed at health care institutions around the world. Although these technologies offer many benefits, ensuring data protection is a major concern, and implementation of robust data protection measures is essential. In this context, health care providers and medical care facilities must frequently make difficult decisions and compromises between the need to provide effective medical care and the need to ensure data security and patient privacy. In the present paper, we describe and discuss key issues related to data protection systems in the setting of cancer care hospitals in Europe. We provide real-life examples from two European countries-Poland and the Czech Republic-to illustrate data protection issues and the steps being taking to address these questions. More specifically, we discuss the legal framework surrounding data protection and technical aspects related to patient authentication and communication.