DEVELOPMENT OF PRIVACY ENGINEERING FRAMEWORK FOR SHARING ELECTRONIC MEDICAL RECORDS DATA

• Main Author: Atikasari
• Format: Theses
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/87888
• Institution: Institut Teknologi Bandung

Protecting personal data in electronic medical records (EMR) has become an important challenge in the digital era. Digital transformation in the healthcare sector presents significant challenges to data privacy and cybersecurity, especially in sharing data through open internet networks that are vulnerable to security threats. The research was conducted to develop a privacy engineering framework capable of supporting the secure management of EMR data sharing following personal data protection (PDP) regulations. The development of the framework uses a privacy engineering approach that ensures privacy principles are integrated at every stage of the system development process. The adaptation of blockchain technology that can be modified through sidechains is implemented to meet one of the privacy principles, the right to be forgotten (RtbF). This technology allows users to have control over their personal data while maintaining data security and integrity. Additionally, the proposed RME data sharing aspect in the research is capable of offering novelty with a focus on developing secure health data integration that meets the needs of various stakeholders. The proposed framework is designed as a technical guide that can be practically implemented. The development stage involves synthesizing privacy principles from PDP and PbD regulations, as well as adapting blockchain-based technology. The prototype framework was tested in the form of a web-based system and a mobile application to evaluate the implementation of the designed privacy principles. The testing was conducted using the OWASP ZAP tool to assess the system's security and Katalon Studio automatic testing to evaluate the application's feature compliance with privacy requirements. The test results show that the developed prototype can meet privacy security requirements. Mobile application testing shows that the available features are appropriate and capable of meeting user needs in the context of PDP. iv The privacy engineering framework can contribute to the management of personal data, particularly RME. With this approach, it is hoped that clear and measurable standards will be created to support the implementation of PDP regulations in sharing RME data. This framework also enables stakeholders to share health data securely without compromising individual privacy rights. Additionally, the integration of blockchain technology in the development of the framework can provide an innovative foundation to enhance trust among parties in the digital health system. Thus, the research is not only able to provide practical solutions in the application of RME data privacy principles but also offers a technical implementation model that can be adapted to support digital transformation in the healthcare sector.