Digital Health, COVID-19 Pandemic, and Cybersecurity Issues
The article focuses on a wide range of cybersecurity issues related to the use of digital technologies in healthcare. Many countries are increasingly adopting digital innovations into their national health systems and therefore raise their cybersecurity risks. The number of cyberattacks on health care organizations is steadily increasing; and the COVID-19 pandemic, which has required more frequent use of digital technologies to address public health challenges, has also influenced the proliferation of criminal cyberattacks. The aim of the study was to describe the main types of criminal, mostly digital, risks for digital health and identify the most important ways to counteract them. The article includes an analysis of international and national regulatory documents, foreign scientific literature, reports of organizations dealing with cybersecurity issues. In preparing it, the authors used general and specific scientific methods including analysis, synthesis, formal and legal analysis, historical method, interdisciplinary research, and expert assessment. The authors conclude that the increasing use of digital technologies in health care, especially in the context of the COVID-19 pandemic, expands the number of targets for cybercriminals. Three main types of digital health criminal risks are identified: attacks on health care organizations, attacks on devices used for medical purposes, including those associated with the Internet of Medical Things, and the theft and disclosure of digitally stored confidential medical information. The latter group of acts is committed by both outsiders and employees of healthcare organizations. The vast majority of registered cybercrimes are profit motivated ones, and the most common cybercrime is extortion with the use of malicious software (ransomware). To counter criminal risks for digital health, the authors propose a set of actions divided into three groups such as legal, technical, and educational. According to the authors, international and national criminal law should immediately respond to digital criminal threats to healthcare systems, in particular by making relevant international agreements and by including the manner in which such crimes are committed into criminal laws as an aggravating circumstance. In addition, the authors note the formation of a special direction in cybersecurity research and practice - healthcare cybersecurity - which requires the development of an appropriate industry, with respective hardware, software, informational and educational products that would be aimed at eliminating and reducing the risks for digital health.
Keywords
digital health,
COVID-19 pandemic,
medical care,
telemedicine,
medical devices,
medical data,
medical data confidentiality,
cyberattack,
cybersecurityAuthors
| Klebanov Lev R. | Peoples' Friendship University of Russia | solomon70@bk.ru |
| Polubinskaya Svetlana V. | Institute of State and Law of the Russian Academy of Sciences | svepol@yandex.ru |
Всего: 2
References
Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions. eHealth Action Plan 2012-2020 - Innovative healthcare for the 21st century. COM (2012) 736 final. URL: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:52012DC0736&from=EN (дата обращения: 17.12.2020).
Meier B.M., Taylor A. Eccleston-Turner M. et al. The World Health Organization in Global Health Law // The Journal of Law, Medicine & Ethics. 2020. Vol. 48, Is. 4. P. 796-799. DOI: 10.1177/1073110520979392
WHO guideline: recommendations on digital interventions for health system strengthening. Geneva : World Health Organization, 2019. URL: https://apps.who.int/iris/bitstream/handle/10665/311941/9789241550505-eng.pdf?ua=1 (дата обращения: 17.12.2020).
WHO. Global strategy on digital health 2020-2025. URL: https://www.who.int/docs/default-source/documents/gs4dhdaa2a9f352b0445bafbc79ca799dce4d.pdf (дата обращения: 17.12.2020).
Digital health. Resolution WHA71.7. May 2018. URL: https://apps.who.int/gb/ebwha/pdf_files/WHA71/A71_R7-en.pdf?ua=1 (дата обращения: 17.12.2020).
Report of the WHO Symposium on the Future of Digital Health Systems in the European Region. Copenhagen, Denmark, 6-8 February 2019. URL: https://apps.who.int/iris/bitstream/handle/10665/329032/9789289059992-eng.pdf (дата обращения: 19.12.2020).
Карпов О. Э., Субботин С. А., Шишканов Д. В., Замятин М. Н. Цифровое здравоохранение. Необходимость и предпосылки // Врач и ин формационные технологии. 2017. № 3. С. 6-22.
Classification of digital health interventions v 1.0. A shared language to describe the uses of digital technology for health. URL: https://apps.who.int/iris/bitstream/handle/10665/260480/WHO-RHR-18.06-eng.pdf (дата обращения: 17.12.2020).
Digital Health Market Share Trends 2020-2026 Growth Report. Global Market Insights. Insights to Innovation. URL: https://www.gminsights.com/industry-analysis/digital-health-market (дата обращения: 11.01.2021).
FDA Guidances with Digital Health content. URL: https://www.fda.gov/medical-devices/digital-health-center-excellence/guidances-digital-health-content (дата обращения: 9.01.2021).
Criteria for health app assessment. URL: https://www.gov.uk/government/publications/health-app-assessment-criteria/criteria-for-health-app-assessment (дата обращения: 9.01.2020).
A guide to good practice for the use of digital technology in health and care. URL: https://www.gov.uk/government/publications/code-of-conduct-for-data-driven-health-and-care-technology/initial-code-of-conduct-for-data-driven-health-and-care-technology (дата обращения: 09.01.2021).
Information Security Management: NHS Code of Practice. URL: https://www.gov.uk/government/publications/information-security-management-nhs-code-of-practice (дата обращения: 9.01.2021).
Kolasa K., Kozinski G. How to Value Digital Health Interventions? A Systematic Literature Review // International Journal of Environmental and Public Health. 2020. Vol. 17, Is. 6. Art. 2119. DOI: 10.3390/ijerph17062119
Maedar A.J., Bidargaddi N.P., Williams P.A.H. Contextualising Digital Health to Fighting the COVID-19 Pandemic // Journal of International Society for Telemedicine and EHealth. 2020. Vol. 8. Art. e3. DOI: 10.29086/JISfTeH.8.e3
Robbins T., Hudson S., Ray P. et al. COVID-19: A new digital dawn? // Digital Health. 2020. Vol. 6. P. 1-3. DOI: 10.1177/2055207620920083.
Hollander J.E., Carr B.G. Virtually Perfect? Telemedicine for Covid-19 // New England Journal of Medicine. 2020. Vol. 382, № 18. P. 16791681. DOI: 10.1056/NEJMp2003539
Schwamm L.H., Erskine A., Licurse A. A digital embrace to blunt the curve of COVID19 pandemic // NPJ Digital Medicine. 2020. Vol. 3. Art. № 64. DOI: 10.1038/s41746-020-0279-6.
Keesara S., Jonas A., Schulman K. Covid-19 and Health Care's Digital Revolution // New England Journal of Medicine. 2020. Vol. 382, № 23. P. e82(1)-e82(3). DOI: 10.1056/NEJMp2005835
Coronavirus Prepardness and Response Supplemental Appropriations Act. H.R. 6074. URL: https://www.congress.gov/bill/116th-congress/house-bill/6074/text?q=%7B%22search%22%3A%5B%22coronavirus+preparedness+and+response+supplemental+appropriations+ act%22%5D%7D&r=1&s=2 (дата обращения: 11.01.2021).
Loeb A.E., Rao S.S., Ficke J.R. et al. Departmental Experience and Lessons Learned With Accelerated Introduction of Telemedicine During the COVID-19 Crisis // Journal of American Academy of Orthopaedic Surgeons. 2020. Vol. 28, № 11. P. e469-e476. DOI: DOI: 10.5435/JAAOS-D-20-00380
European Commission. Shaping Europe's digital future. Digital health technologies addressing the pandemic. URL: https://ec.europa.eu/digital-single-market/en/digital-health-technologies-addressing-pandemic (дата обращения: 11.01.2021).
Hayardeny E. Protecting healthcare organizations from cyberattacks // Security. 2020. Dec. 4. URL: https://www.securitymagazine.com/articles/94087-protecting-healthcare-organizations-from-cyberattacks (дата обращения: 11.01.2021).
Singleton C., Kiefer C., Villadsen O. Ransomware 2020: Attack Trends Affecting Organizations Worldwide // Security Intelligence. 2020. Sept.
URL: https://securityintelligence.com/posts/ransomware-2020-attack-trends-new-techniques-affecting-organizations-worldwide/(дата обращения: 21.01.2021).
Blinder A., Perlroth N. Hard Choice for Cities Under Cyberattack: Whether to Pay Ransom // New York Times. URL: https://www.nytimes.com/2018/03/29/us/atlanta-cyberattack-ransom.html (дата обращения: 15.01.2021).
Ghafur S., Grass E., Jennings N.R., Darzi A. The challenges of cybersecurity in health care: the UK National Health Service as a case study // The Lancet Digital Health. 2019. Vol. 1, № 1. P. e10-e12. DOI: 10.1016/S2589-7500(19)30005-6
Eddy M., Perloth N. Cyber Attack Suspected in German Woman's Death // The New York Times. 2020. Sept. 18. URL: https://www.nytimes.com/2020/09/18/world/europe/cyber-attack-germany-ransomeware-death.html (дата обращения: 22.01.2021).
Cyber Security Report. 2020. Check Point Software Technologies LTD. URL: https://www.ntsc.org/assets/pdfs/cyber-security-report-2020.pdf (дата обращения: 14.01.2021).
BD 2020 Cybersecurity Report. Improving cybersecurity collaboration across the industry. URL: https://cybersecurity.bd.com/docu-ments/Cybersecurity/BD_BD-2020-Cybersecurity-Report_EN.pdf (дата обращения: 14.01.2021).
2020 HIMSS Cybersecurity Survey. Healthcare Information and Management Systems Society. URL: https://www.himss.org/sites/hde/files/media/file/2020/11/16/2020_himss_cybersecurity_survey_final.pdf (дата обращения: 14.01.2021).
Burt T. Cyberattacks targeting health care must stop. 2020. Nov. 13. URL: https://blogs.microsoft.com/on-the-issues/2020/11/13/health-care-cyberattacks-covid-19-paris-peace-forum/(дата обращения: 22.01.2021).
Coravos A., Goldsack J.C., Karlin D.P. et al. Digital Medicine: A Primer on Measurement // Digital Biomarkers. 2019. Vol. 3, № 2. P. 31-71. DOI: 10.1159/000500413
Garg S., Williams N.L., Ip A., Dicker A.P. Clinical Integration of Digital Solutions in Health Care: An Overview of the Current landscape of Digital technologies in Cancer Care // JCO Clinical Cancer Informatics. 2018. Vol. 2. P. 1-9. DOI: 10.1200/CCI.17.00159
Burki T. The dangers of the digital age // The Lancet Digital Health. 2019. Vol. 1, № 2. P. e61-e62. DOI: 10.1016/S2589-7500(19)30032-9
Zetter K. Hospital viruses: Fake cancerous nodes in CT scans, created by malware, trick radiologists // The Washington Post. 2019. April 3. URL: https://www.washingtonpost.com/technology/2019/04/03/hospital-viruses-fake-cancerous-nodes-ct-scans-created-by-malware-trick-radiologists/?fbclid=IwAR2sE8kdnrlVW-YxPI2F3S0jFe7nzujxZq5-QNDSbrYBsOJ4idTlESFORa4&noredirect=on (дата обращения: 15.01.2021).
Taitsman J.K., Grimm C.M., Agrawal S. Protecting Patient Privacy and Data Security // The New England Journal of Medicine. 2013. Vol. 368, № 11. P. 977-979. DOI: 10.1056/NEJMp1215258
В сети оказались личные данные 100 тыс. московских пациентов // Новости Mail.ru. URL: https://news.mail.ru/society/44491151/(дата обращения: 22.01.2021).
