Health data are among the most sensitive categories of personal information, and the rules governing them — GDPR in Europe, HIPAA in the United States, and national frameworks elsewhere — set out when processing is lawful, not whether it is possible. Those frameworks are frequently cited as prohibiting sharing that they in fact permit.
This topic covers consent, secondary use, de-identification and the gap between what is legally allowed and what people expect. It also covers breaches, because a health record cannot be reissued the way a payment card can.
Artificial intelligence in healthcare: where AI is used, what the evidence shows, regulation of AI medical devices, bias and safety risks, and governance requirements.
How health systems share patient data: interoperability levels, HL7 FHIR, SNOMED CT, LOINC, DICOM, health information exchange, privacy law and barriers.
How healthcare regulation works: who regulates professionals, providers, medicines, devices and data, how rules are enforced, and why regulatory systems differ.