Visualizing privacy analysis results

Health data usage is regulated by health data regulation, such as PHIPA (https://en.wikipedia.org/wiki/PHIPA). To support the increasing demand in healthcare, systems utilizing digital storage and processing personal data has become essential, e.g. hospital data management systems. However, these systems are often complex and prone to data theft, misuse, and other data privacy concerns. Therefore, satisfying data privacy goals and enforcing health data regulation is crucial for these systems. That, however, remains challenging due to ambiguity and interpretation of regulation’s natural language. In this context, the goal of this project is to help systems that deal with medical data to respect health data regulation. We are working towards building an automatic approach to guid system’s compliance with health data regulations. Software compliance with a regulation can be checked on the system design or on an operational model of a system implementation. In this project, we focus on the early stage, where one can check whether a formalization of the system requirements satisfies privacy data regulations. The formalization can be done using a descriptive formalism like temporal logic, instead of using an operational one, based on transition systems.

Faculty Supervisor:

Marsha Chechik

Student:

Partner:

Lviv Polytechnic National University

Discipline:

Computer science

Sector:

Health and Related Sciences & Technology; Education; Technology

University:

University of Toronto

Program: