医疗机构App个人信息合规性评估研究与治理对策

Research on the assessment of medical institutions Apps' personal information compliance and its countermeasures

医疗机构App作为采集患者个人信息的前端,是医疗机构进行个人信息保护实践的良好抓手。以隐私政策合规性、违规收集、违规传输和存储、违规加工和使用、违规公开和提供、违规删除和其他杂项等7个方面对30家医疗机构App的数据评估为基础,分析了医疗机构App在个人信息保护方面存在的问题,并提出进一步规范医疗机构App个人信息保护的建议。

As the front-end of collecting patients' personal information,medical institution Apps serve as a good starting point for medical institutions to carry out personal information protection.Based on the data assessment of 30 medical institution Apps from 7 aspects,including privacy policy compliance,unauthorized collection,unauthorized transmission and storage,unauthorized processing and use,unauthorized transmission and storage,unauthorized processing and use,illegal disclosure and provision,illegal deletion and other miscellaneous aspects,this paper analyzes the problems existing in the personal information protection of medical institution Apps and proposes suggestions for further standardization of personal information protection.