Privacy enhancing technology uses mature cryptographic methods. In spite of that and in the face of increased privacy violation risks due to complex and flexible data flows and the increased need of live data to support evidence based medicine and management decisions, privacy enhancement take-up is slow. PRIDEH starts from experiences gained by its partners (CUSTODIX as supplier and WREN as USER) in the implementation of pseudonymisation services in the pharmaceutical and health domains. The solutions are based on Trusted Third Party provision of privacy services and the incorporation of privacy enhancing modules into application software. PRIDEH will show the feasibility and added value of PET in the health domain. Information needs to be disseminated and feedback gained from relevant groups, such as standardisation, legislative and citizen organisations.
PRIDEH aims to achieve an overall and fast uptake of privacy enhancing technology (PET) by the healthcare sector. The project will show that service provision for privacy enhancing technologies is available and that it pays for software developers to ship their software packages with embedded privacy enhanced functionality. The partners involved have already been working together and have implemented partial solutions, which incorporate PET into applications. The resulting solution needs fine-tuning since in the commercial arena the focus has been on timely delivery and fit-for-the (application) purpose functionality. Both partners are convinced that an enhanced co-operation will yield increased benefits for the whole Community.
The work in PRIDEH will consists of a mixture of trials, feasibility studies, methodology development and strong dissemination strategies. CUSTODIX has developed a method for pseudonymisation that involves the services of a Trusted Third Party (TTP) providing pseudonymisation services in a client-server relationship with its security and communication client modules. WREN has implemented these user modules in its application software written for and effectively used by the healthcare community. Until now the focus has been on timely delivery and application functionality of the user software. However, by the development of a methodology in the application of PET in user application, PET use will be greatly stimulated. The overall strength of PET will be examined and guidelines developed for achieving a sufficient level of protection, both in technical, organisational and legal terms .A promotion plan to achieve faster and broader market acceptance of privacy enhancing techniques will be produced. This must show for which targets groups privacy protection add value. Dissemination of results via publications and the organisation of workshops and lectures are considered essential for the success of the project. Close links will be established with standardisation activities in health informatics and beyond. Very important target groups to establish two-way contacts with are the legal experts, and groups that can influence legislation.
The expected result is an increased awareness of the added value of PET based services and the establishment of trust into privacy enhancing services because of a broad support.
PRIDEH rests on three supporting pillars:
low threshold and high added value for PET integration into applications;
Trust in TTP based PET service provision through quality assurance (guidelines);
Convince legal experts to create a legal framework for PET based service provision and fill the legal void for the users.
Funding SchemeACM - Preparatory, accompanying and support measures
BL0 9AJ Ramsbottombury, Lancashire