Access To Personal Information Research Articles

Privacy and Personal Information Protection by Social Media Companies in an AI era

Social media platforms have become vast and powerful tools for connecting, communicating, sharing content, conducting business, and disseminating news and information. The history and evolution of social media illustrates not only the digital society’s ever-growing dependence on social media, but also the downside to this reliance, namely the challenges of protecting a social media user’s privacy and personal information. As technological advancement such as artificial intelligence (AI) grow and impacts on the way data, not only personal but also product and service data, is collected, the spotlight is increasingly focusing on the difficulties in privacy and data protection in an AI-era. The discussion focusses on the misconduct by social media companies in respect of privacy and personal information and the lessons learnt from the way in which social media companies have dealt with social media users’ information. Since self-regulation by a social media company does not provide adequate safeguards that privacy and personal information will be protected, limitations to the collection, use, access, and storage of personal information must be imposed by means of legislation. To ensure compliance, non-compliance must be linked to a penalty and enforced by a government. Privacy and data protection regulations were formulated in a pre-AI era, and at that stage, the implications of the rapid evolution of AI on privacy and data protection were not foreseen. To ensure digital trust in an AI era, the legal consequences of misconduct of social media companies must be explored. Social media users must have control of their own data and social media companies must be clear about the kind of data a company will collect on its users, and for what purposes. The lessons learnt from past misconduct is also indicative of whether personal data protection legislation is flexible enough to provide for AI or whether specific legislation must be implemented as society enters the AI era. As the Fourth Industrial Revolution takes shape and AI gains prominence, the data legal landscape is evolving with compliance and enforcement being key to protecting privacy and data, addressing legal uncertainty, and ensuring trust.

Optimizing Doctor Availability and Appointment Allocation in Hospitals through Digital Technology and AI Integration

Many patients miss their appointments all around the world and many of them don't even cancel at all or don't do so in time due to several reasons. In order to address the widespread issue of medical no-shows, this paper proposes a solution that involves building a machine learning model utilizing patient datasets that are already available. This model will identify patterns and links between various patient factors and the patients' propensity to miss appointments. As a result, based on their information, it is possible to anticipate the chance of a patient appearing. Based on the Support Vector Machines classification technique, the machine learning model created the solution predictive model. Effective healthcare services are vital in today's fast-paced environment. This strategy aims to reduce the distance between patients and medical professionals by offering a workable and friendly solution. For certain medical institutions, such as clinics and hospitals, this initiative makes it easier for patients and customers to schedule doctor appointments online. Using this technology, patients may easily browse a database of doctors' biographies, specializations, and availability. Even the day and time of their choosing can be chosen for appointments. Each patient's appointment request will be scheduled by this doctor's appointment system and forwarded to the physician. The system administrator will update the list of doctors, including their specialties, personal information, and system access credentials. Patients will look for a physician who specializes in their requirements by exploring the doctor's appointment system online. Before making their request, the patient can browse the doctor's weekly schedule to choose a day and time that works best for them. Following that, the physicians have access to all of their appointments as well as the patients' appointment requests, which are prioritized according to their availability. It gives medical professionals a strong tool for successfully managing the schedules, which reduces administrative strain and ensures a positive patient experience.

Learning-Based Models for Building User Profiles for Personalized Information Access

Learning-Based Models for Building User Profiles for Personalized Information Access

Re-Evaluating Trust and Privacy Concerns When Purchasing a Mobile App: Re-Calibrating for the Increasing Role of Artificial Intelligence

Mobile apps utilize the features of a mobile device to offer an ever-growing range of functionalities. This vast choice of functionalities is usually available for a small fee or for free. These apps access the user’s personal data, utilizing both the sensors on the device and big data from several sources. Nowadays, Artificial Intelligence (AI) is enhancing the ability to utilize more data and gain deeper insight. This increase in the access and utilization of personal information offers benefits but also challenges to trust. Using questionnaire data from Germany, this research explores the role of trust from the consumer’s perspective when purchasing mobile apps with enhanced AI. Models of trust from e-commerce are adapted to this specific context. A model is proposed and explored with quantitative methods. Structural Equation Modeling enables the relatively complex model to be tested and supported. Propensity to trust, institution-based trust, perceived sensitivity of personal information, and trust in the mobile app are found to impact the intention to use the mobile app with enhanced AI.

리걸테크의 도입과 형사전자소송의 가능성 및 한계

When The Act on the Use of Electronic Document in Criminal Justice Procedures is fully implemented in 2024, it is expected that full-fledged electronic litigation will be possible in criminal procedures. The scope of application of The Act on the Use of Electronic Document in Criminal Justice Procedures is limited to criminal justice affairs, but in the long run, it will expand to the macroscopic perspective of digitalization and intelligent informatization of overall criminal justice services. However, even if the law or system is established, there may be various expected problems in the process of operation. To this end, in this paper, first of all, the obstacles to the activation of Legal Tech, which is the environmental basis of electronic criminal proceedings, were examined. After confirming the specific aspects of the litigation, we examined the points where the electronic criminal proceedings can function or expand in the trial process In this paper, first of all, the fundamental cause of the lack of discussion on Legal Tech, which can be the environmental basis of electronic criminal proceedings, was identified. While accepting legal tech, such as intelligent information technology, the author raised issues such as our still conservative legal system and practices, information accessibility of personal information, and intellectual property rights infringement. Next, as a supplementary point for the success of electronic criminal proceedings, a plan to resolve the reluctance of those involved in the case in electronic criminal proceedings and a plan to prevent abuse of accumulated data were presented. Next, in the introduction process by stage of litigation, it was ordered to improve the system considering the difference in digital literacy in the process of submitting litigation documents, the issue of equality in the process of distributing electronic documents, and legislative overhaul for exceptions to the provision of service. On the other hand, the implementation of the Criminal Procedure Electronic Documents Act provides significant implications for e-discovery. In the disclosure of evidence, the practice of written caution will be overcome, and various problems raised in the academic world in relation to the refusal of the investigation agency to disclose evidence will be resolved. It will be possible to examine the adequacy of the reason for refusal by the investigative agency, and in particular, it will be possible to secure the binding force of the court's order to disclose evidence and prepare a separate regulation so that the investigative agency cannot refuse the order to disclose evidence. In addition, in this paper, we also looked at the possibility of using intelligent information technology in determining the verifiable power or reliability of electronic remote statements and statements that can be used in courts.

Privacy of biofeedback human interfacing devices

<span>The public and governmental focus have been shifted increasingly onto data and privacy due to Facebook’s standoff with Apple and several Nations’ Governments. An imperative for the discussion of data handling has been made, while Biofeedback human interfacing device (HID) companies such as CTRL-labs and Neuralink introduce new risks in the access, use, and control of personal health information. This paper combines the lexicon of digital self-extension with line drawing analysis to help visualize the industry use of personally identifiable information (PII). Through this analysis encapsulation methods of users' PII have been identified such that discussion of encrypting personal health information (PHI) can be facilitated through analogy. To reduce the likelihood that companies generating biometric hardware are subject to future legal action through laws analogous to European Privacy Law, it is in their best interest to be transparent with their users about data sharing, and educate them on how the companies encrypt their PHI. Should users consent to the use of biometric hardware, this process validates the user control of their own PHI.</span>

Security Perception of IoT Devices in Smart Homes

IoT devices are used frequently in smart homes. To better understand how users perceive the security of IoT devices in their smart homes, a model was developed and tested with multiple linear regression. A total of 306 participants participated in the survey with measurement items, out of which 121 had already been using IoT devices in their smart homes. The results show that users’ awareness of data breaches, ransomware attacks, personal information access breaches, and device vulnerabilities have an effect on IoT security importance. On the other hand, users often do not check their security settings and feel safe while using IoT devices. This paper provides an overview of users’ perception of security while using IoT devices, and can help developers build better devices and help raise awareness of security among users.

A WEB-BASED PLATFORM FOR MANAGEMENT AND VISUALIZATION OF GEOMETRIC DOCUMENTATION PRODUCTS OF CULTURAL HERITAGE SITES

Abstract. The mission of digital Cultural Heritage (CH) repositories goes beyond engagement and dissemination; their research data should be approached and correlated spatially and semantically in the service of conservation and accessibility. Therefore, a flexible system is needed to expand, reuse and repurpose their content, addressing online collaboration, real time progress and ease of use. Towards this direction, the “METEORA” web-based platform is a novel and holistic approach to the organization, management and visualization of the 3D and 2D documentation products of CH sites. It integrates a multi-scale 3D viewer based on the 3DHOP framework, personalized information access and interactive tools for data retrieval and presentation. Emphasis is given in the development of a mid-level interface for creating, updating and maintaining 3DHOP’s functionalities and customizing information based on the user’s scientific specialty and field of interest. The proposed admin control panel updates the state of the current visualization, allows the integration of 3D models and multimedia and automates the creation of clickable points of interest on top of the 3D surfaces. It is based on a MySQL Relational Database Management System (RDBMS) that supports the back-end User Interface (UI) with create, read, update and delete (CRUD) management functions of a typical RESTful service. Moreover, all the control mechanisms as well as the procedures of authentication, authorization and encryption of the credentials of the certified users are configured through the PHP scripting language and JSON files. The resulting platform achieves maximum adaptability in digital archiving of heterogeneous datasets and has increasing efficiency in representing all types of data supported by 3DHOP.

Guidance and Counseling Record Management System

The developed Record Management System for Guidance and Counseling Center of the Nueva Ecija University of Science and Technology aimed to provide software application that will manage the recordof student and provides fast and easy access of personal information of students. The functions focused in adding and updating students’ information/profile by using the application. The user can produce a printed copy of the record of student. The development of the Record Management System underwent the phases for System Development Life Cycle (SDLC) such as: Stage 1 –Planning; Stage 2 –Analysis; Stage 3 –Design; Stage 4 –Coding; Stage 5 –Testing; Stage 6-Implementation; and Stage 7 –Maintenance.The system took three months to be developed was accomplished using Visual Basic 2017 programming language and Microsoft SQl Server 2017 database. Record Management Systemhas been strongly accepted by the respondents based on their assessment on these five criteria: functionality, usability, efficiency, portability,and security. The suggestions given by the group of respondents may be considered for future enhancement of the system.

21st Century Cures Act: Patient-Facing Implications of Information Blocking.

The information-blocking provision of the Cures Act is designed to promote interoperability of health IT systems and mandates immediate access and portability of personal electronic health information for patients, providers and payers. In essence, this legislation requires no delay in access to clinical information including radiology reports once entered into the electronic health record. This is at odds with the current settings of many electronic health record systems, which employ time-delayed releases (embargo) of radiology reports. In such systems, there is a predetermined delay, such as days to weeks, between when a radiology report is signed off by the radiologist and when the report becomes available for patient access via the online patient portal. The idea behind this practice is that the delay allows time for the referring provider to read the report and coordinate care for the patient before the patient becomes aware of potentially abnormal and anxiety-provoking imaging findings. At the time of this writing, it is unclear whether such embargo programs will meet information-blocking definitions and thereby be subject to financial disincentives. Many provider groups are preparing for enforcement of the information-blocking by removing their report embargo programs. This article describes the challenges and opportunities created by the immediate release of radiology reports to patients via online patient portals and suggests strategies that groups may consider to ease their transition to this model of care delivery.

Sticky Policies: A Survey

In the digital age, where the Internet connects things across the globe and individuals are constantly online, data security and privacy are becoming key drivers (and barriers) of change for adoption of innovative solutions. Traditional approaches, whereby communication links are secured by means of encryption, and access control is run in a static way by a centralized authority, are showing their limits when applied to massive-scale, interconnected and distributed systems. Regulations, while still fragmented, are moving to adapt to changes in technology and society, with the aim to protect confidential information by governments, businesses, and individual citizens. In this landscape, proper mechanisms should be defined to allow a strict control over the data life-cycle and to guarantee the privacy and the application of specific regulations on personal information's disclosure, usage and access. Sticky policies represent one approach to improve owners' control over their data. In such an approach, machine-readable policies are attached to data. They are called 'sticky' in that they travel together with data, as data travels across multiple administrative domains. In this article we survey the state-of-the-art in sticky policies, discussing limitations, open issues, applications and research challenges, with a specific focus on their applicability to Internet of Things, cloud computing, and Content Centric Networking.

Multistakeholder recommendation: Survey and research directions

Recommender systems are personalized information access applications; they are ubiquitous in today's online environment, and effective at finding items that meet user needs and tastes. As the reach of recommender systems has extended, it has become apparent that the single-minded focus on the user common to academic research has obscured other important aspects of recommendation outcomes. Properties such as fairness, balance, profitability, and reciprocity are not captured by typical metrics for recommender system evaluation. The concept of multistakeholder recommendation has emerged as a unifying framework for describing and understanding recommendation settings where the end user is not the sole focus. This article describes the origins of multistakeholder recommendation, and the landscape of system designs. It provides illustrative examples of current research, as well as outlining open questions and research directions for the field.

Ethics, Legal and Privacy Concerns for the Next Generation of Insurance Policies

Abstract We present a set of hypothetical scenarios and cases where the need for access, sharing and processing of sensitive personal information increases the transparency of the customer to buyer relationship, although it may irreversibly damage the customer’s sphere of privacy. Highly personalised early risk prediction models for use by insurance companies to estimate the probability that a specific event (heart infarct) or a disease (diabetes) occurs in a given individual over a predefined time can enable earlier and better intervention, prevent negative consequences on a person’s quality of life and thus result in improved individual health outcomes. The challenge is to design, develop and validate new generations of comprehensive models that will be the result of a consensual process with the customers and will be based on artificial intelligence and other state-of-the-art technologies using multiple available data resources and will integrate them in personalised insurance policy pathways that empower the customers to actively contribute to their own individual health-risk mitigation and prevention.

Personal factors and personal information activities behaviors of faculty in selected universities in Ghana

This study examined how demographic characteristics of faculty influence their personal information activities behaviors, namely information creation, information organization, and information storage. Data was collected from a sample of 235 faculty in six universities in Ghana using a questionnaire. Age, gender, rank and university of affiliation predicted personal information activities behaviors in different directions and with different magnitudes. Gender made a difference in information organization and information storage while age made a difference in respect of information creation and information organization only. Faculty ages 4049 years created information the most, followed by those above 50 years. Males stored information more than females. Rank made a difference in information creation, organization and storage, but university of affiliation made a difference in information creation and information storage, and not information organization. It is common among information system designers and managers to implement information management systems without considering the differential influence of personal variables on human information behaviors. This omission denies information users adequate access and maximum use of the information in their information space. Institutional leaders and PIM systems designers should consider demographic and other personal factors of faculty in information literacy programs. Profiling of users' personal characteristics when designing personal information management systems will enhance maximum access and utilisation of personal information.

Driving health behavior: The roles of personal health information use and attitudes towards health in women’s cancer screenings

Objective: Our interest in patient attitudes and beliefs and how they contribute to health and health seeking behaviors is based on growing interest in fostering more patient-centered care. This is particularly relevant for cancer screening in women, where the procedures may be viewed as deeply personal and emotionally invasive. There is convincing evidence that health attitudes and beliefs are strong associates of cancer screening among women. The goal of this paper is to examine if accessibility and use of personal health information (PHI) is a positive predictive of cancer related health detection behaviors among United States women. This study is relevant and timely considering the growing focus on prevention in patient-centered care delivery.Methods: Using data from the 2017 Health Information National Trends Survey (HINTS), this paper employed multivariable path analysis to investigate whether PHI use is related to engaged women’s health detection behaviors, and if this relationship is mediated by self-perceived health status and patient attitudes regarding confidence in their self-care abilities.Results: This study found that PHI use worked directly on health detection behaviors for intermediate levels of health information only. Our findings also suggest that patient attitudes may only act as a mediator at low levels of information use and when both confidence in self-care abilities and self-assessed health status are considered simultaneously.Conclusions: As prevention continues to be a key focus of health care, efforts promoting enhanced population health are critically important. With greater expansion of patient portals, health systems and providers are expecting access to greater PHI will promote increased engagement by patients in their self-health. The results of our research suggest that PHI is positive for patients up until a point and that health care delivery professionals may wish to assess the amount and type of information made readily available to the patients they serve related to breast and cervical cancer screenings.

The Solutions of SQL Injection Vulnerability in Web Application Security

Web Applications are commonly using all the services made available online. The rapid development of the Internet of Things (IOT), all the organizations provides their services and controlled through an online, like online transaction of money, business transaction of buying and selling the products, healthcare services, military and GPS Systems. Web application development and maintenance is very difficult based on the security. Attacks are many forms to stealing the secure, personal information and privacy data. There is one major open source community Open Web Application Security Project (OWASP) providing information, development and validation of web application projects to make application to be secure. This research work, discussing few of the solutions, detection and prevention methods of Injection risk out of the top 10 OWASP risks. Due to the injection risk, impact on business that may lead to loss of information, unauthorized access of personal and secure information.

How accessible are you? A hospital-wide audit of the accessibility and professionalism of Facebook profiles.

Introduction Social media is an integral part of modern society and is increasingly being used by patients and clinical staff alike. The General Dental Council and most employers have social media guidelines to ensure employees use social media responsibly and do not bring their organisations into disrepute.Aims To establish the accessibility of Facebook profiles of the staff and students at Eastman Dental Hospital (EDH) and to assess compliance with the latest social media guidance from the General Dental Council as well as the employing trust and university.Design and setting A hospital-wide prospective audit conducted from January to March 2018 at Eastman Dental Hospital.Gold standard One-hundred percent compliance with: a) General Dental Council (GDC); b) University College London (UCL); and c) University College London Hospitals (UCLH) social media policies.Materials and methods The names of all clinical staff/students at EDH were searched for on Facebook using a dummy profile account, to simulate a member of the public. The profiles were assessed for the accessibility of personal information, affiliations to UCL/UCLH, personal views, social networking and conduct.Results A total of 219 out of 440 profiles (50%) were identified and were accessible to varying degrees. Many accessible profiles had a profile picture and personal information visible such as gender and location. No violations of patient confidentiality were seen. Overall, 6% (n = 14) and 2% (n = 4) of profiles displayed unprofessional behaviour and substance abuse, respectively.Discussion This audit highlighted Eastman Dental Hospital's compliance to local and national social media policies.Conclusion It was not possible to identify all staff/students through the Facebook search function. No serious professional misconduct was identified, however a small minority displayed unprofessional behaviour.

Access and Disclosure of Personal Health Information: A Challenging Privacy Landscape in 2016-2018.

Summary Objectives: To assess the current health data access and disclosure environment for potential privacy-protecting mechanisms that enable legitimate use of personal health information while preserving the rights of individuals. To identify the gaps and challenges between increasing requests and expanding uses of such information and the regulations, technologies, and management practices that permit appropriate access and disclosure while guarding against harmful misuse of such information. Methods: A scoping literature review focused on (1) regulations affecting access and disclosure of personal health information, (2) the uses of health information that challenge access and disclosure boundaries, and (3) privacy management practices that may help mitigate gaps in protecting patient privacy. Results: Countries and jurisdictions are developing laws, regulations, and public policies to balance the privacy rights of individuals and the unprecedented opportunities to advance health and health care through expanded uses of health data. Regulations and guidance are evolving, but they are outpaced by the increasing demand for and the challenges of managing access and disclosure. Mechanisms such as consent and authorization may not always be adequate. Mechanisms that advance principled stewardship are more important than ever. Conclusions: Access and disclosure management are important dimensions of privacy management practices. This is a volatile period in which diverging public policies may reveal how best to balance access and disclosure of personal health information by individuals and by institutional custodians of the information. Approaches to access and disclosure management, including the roles of individuals, should be a focus for research and study in the years ahead.

Guaranteeing the integrity and reliability of distributed personal information access records

Attackers try to forge or delete personal information access records to hide traces of their attacks. As personal information access records can be used to analyze infringement accidents or as legal evidence in the event of malicious attacks, maintaining their integrity is very important. This article presents measures to efficiently prove the integrity of distributed personal information access records. To construct a reliable log system, diversified security requirements are established, and mechanisms such as a hash chain, message authentication code, and Merkle tree are incorporated. Moreover, as integrity is proved through a third-party verification institution, attacks by external as well as internal attackers can be detected. During the validation process, existing log record protection methods fail to detect forgery or deletion of certain data or have difficulty identifying the time of attack, but such drawbacks are addressed by the proposed integrity verification process, with only a minor increase in computational load.

Ethical Issues in Secondary Use of Personal Health Information

The accessibility of personal health information (PHI) will increase on the Internet of the future to provide timely support for both primary and secondary uses. Although PHI for secondary uses is generally anonymized, its widespread distribution on the Internet raises ethical concerns. The PHI should remain an individual's most closely guarded asset [1], [2]. While other forms of personal data represent what the person does, owns, or knows, PHI represents what the person is. PHI describes the biological attributes of the human being, often containing longitudinal records of wellness, illness, test results, and treatments [3]. These characteristics amplify the seriousness and un-reversible consequences that uniquely differentiate breaches or disclosures of PHI data from other forms of data breach. In conducting risk assessment analysis, the result of even a single PHI data breach can be catastrophic. As it is impossible to place a price on our health, it is similarly impossible to place a price on PHI. Risk assessments calculations [4] involving annual loss expectancy, single loss expectancy, or annualized rate of occurrence are irrelevant when PHI has been breached. In light of this, the questions of: (1) granting the patient the right to consent, that is, opt-in or out, of the de-identification and subsequent secondary use of their PHI; and (2) finding synthetic alternatives to de-identified PHI for certain type of secondary uses to protect patient privacy, urgently need to be addressed.