How the European Commission is supporting innovation in mobile health technologies Nordic Mobile Healthcare Technology Congress 2015

Similar documents
Privacy Code of Conduct on mhealth apps the role of soft-law in enhancing trust ehealth Week 2016

ehealth action in the EU

United4Health session Regulatory Framework Trends & Updates. Nicole Denjoy COCIR Secretary General Wed. 7 May 2014, Berlin (Germany)

INTERMEDIATE EVALUATION

Classification and regulation of software

The MovingLife Project

ehealth and DSM, Digital Single Market

Birgit Morlion. DG Communications Networks, Content and Technology (DG CONNECT)

A comprehensive approach on personal data protection in the European Union

Borderless ehealth in support of healthy citizens in Europe

Regulating Telemedicine: the

EU mhealth Working Group

ehealth Network Multiannual Work Programme "ehealth in support for better health"

Seminar om de nye regler for certificering

CEN and CENELEC Position Paper on the draft regulation ''Cybersecurity Act''

European Union Agency for Network and Information Security

Report of the Working Group on mhealth Assessment Guidelines February 2016 March 2017

STANDARDS TO HELP COMPLY WITH EU LEGISLATION. EUROPE HAS WHAT IT TAKES INCLUDING THE WILL?

ehaction Joint Action to Support the ehealth Network

European Commission Directorate General Enterprise and Industry INSTITUTIONAL FRAMEWORK ON

Package of initiatives on Cybersecurity

Infrastructures and Service Dimitra Liveri Network and Information Security Expert, ENISA

Directive on security of network and information systems (NIS): State of Play

New cybersecurity landscape in the EU Sławek Górniak 9. CA-Day, Berlin, 28th November 2017

ehealth in Europe: at the convergence of technology, medicine, law and society

COUNCIL OF THE EUROPEAN UNION. Brussels, 24 May /13. Interinstitutional File: 2013/0027 (COD)

Summary. Strategy at EU Level: Digital Agenda for Europe (DAE) What; Why; How ehealth and Digital Agenda. What s next. Key actions

The emerging EU certification framework: A role for ENISA Dr. Andreas Mitrakas Head of Unit EU Certification Framework Conference Brussels 01/03/18

A Strategy for a secure Information Society Dialogue, Partnership and empowerment

ENISA s Position on the NIS Directive

VdTÜV Statement on the Communication from the EU Commission A Digital Single Market Strategy for Europe

ENISA EU Threat Landscape

European Commission Initiatives in telemedicine Presentation endorsed by the European Commission

ENISA activities in ICT security certification Dr. Prokopios Drogkaris NIS Expert NLO Meeting Athens

Cybersecurity. Quality. security LED-Modul. basis. Comments by the electrical industry on the EU Cybersecurity Act. manufacturer s declaration

EU EHEALTH INTEROPERABILITY,

ENISA Cooperation in the EU / NIS Directive

Call for Expressions of Interest

H2020 WP Cybersecurity PPP topics

Rolf Engelbrecht, Claudia Hildebrand, Hans Demski

DRAFT Privacy Statement (19 July 2017)

Towards a European Cloud Computing Strategy

ehealth Ministerial Conference 2013 Dublin May 2013 Irish Presidency Declaration

Developing an integrated e-health system in Estonia

Discussion on MS contribution to the WP2018

cybersecurity in Europe Rossella Mattioli Secure Infrastructures and Services

The EU Cybersecurity Package: Implications for ENISA Dr. Steve Purser Head of ENISA Core Operations Athens, 30 th January 2018

COMESA CYBER SECURITY PROGRAM KHARTOUM, SUDAN

Third public workshop of the Amsterdam Group and CODECS European Framework for C-ITS Deployment

Third public workshop of the Amsterdam Group and CODECS C-ITS Deployment in Europe: Common Security and Certificate Policy

Google Cloud & the General Data Protection Regulation (GDPR)

Transforming Healthcare with mhealth Solutions.

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

The ICT for Health Perspective

Workshop: mobile Health

ARTICLE 29 DATA PROTECTION WORKING PARTY

Cybersecurity & Digital Privacy in the Energy sector

The NIS Directive and Cybersecurity in

NIS Standardisation ENISA view

The HUMANE roadmaps towards future human-machine networks Oxford, UK 21 March 2017

Europe (DAE) for Telehealth

cybersecurity in Europe Rossella Mattioli Secure Infrastructures and Services

European Transport Policy: ITS in action ITS Action Plan Directive 2010/40/EU

Digital Healthcare. Yordan Iliev Director R&D Healthcare. Regional Cybersecurity Forum, November 2016, Grand Hotel Sofia, Bulgaria

European Standards- preparation, approval and role of CEN. Ashok Ganesh Deputy Director - Standards

mhealth: a Global Perspective OECD Expert Consultation on Mobile Technology-Based Services for Global Health & Wellness

Emerging Challenges in mhealth: Keeping Information Safe & Secure HCCA CI Web Hull Privacy, Data Protection, & Compliance Advisor

Topics 4/11/2016. Emerging Challenges in mhealth: Keeping Information Safe & Secure. Here s the challenge It s just the beginning of mhealth

M HEALTH SHARING INDUSTRIAL VISION AND EXPERIENCE. Dr Beatrice Falise Mirat COCIR Business and Innovation Committee ehealth Member Orange Healthcare

eidas Regulation (EU) 910/2014 eidas implementation State of Play

ehealth Network ehealth Network Governance model for the ehealth Digital Service Infrastructure during the CEF funding

Security Aspects of Trust Services Providers

EU draft mhealth app assessment guidelines: Open Stakeholder Meeting 9 th June. Andrew Ruck & Charles Lowe

Security and resilience in Information Society: the European approach

MOBILE HEALTH, CONNECTIVITY AND PATIENT EMPOWERMENT EPF S PERSPECTIVE

CEF e-invoicing. Presentation to the European Multi- Stakeholder Forum on e-invoicing. DIGIT Directorate-General for Informatics.

April 21, Division of Dockets Management (HFA-305) Food and Drug Administration 5630 Fishers Lane, Room 1061 Rockville, Maryland 20852

Regulating Cyber: the UK s plans for the NIS Directive

THE NEW EU DATA PROTECTION REGULATION: WHAT IS IT AND WHAT DO WE NEED TO DO? KALLIOPI SPYRIDAKI CHIEF PRIVACY STRATEGIST, EUROPE

The NIST Cybersecurity Framework

PREPARING FOR THE GDPR AT THE UNIVERSITY OF HELSINKI

Resilience, Deterrence and Defence: Building strong cybersecurity for the EU

Achim Klabunde European Commission DG Information Society & Media

The commission communication "towards a general policy on the fight against cyber crime"

Cisco Spark and GDPR. Thomas Flambeaux. Collaboration Consulting Solution Engineer, Security and Compliance. Cisco Connect 2018 Copenhagen April 12th

The German IT Security Certification Scheme. Joachim Weber

ENFORCEMENT POWERS. The EU Perspective. Olivier Proust. Associate Hunton & Williams LLP

HEALTH IN ECSO (European Cyber Security Organisation) 18 October 2017

The European Policy on Critical Information Infrastructure Protection (CIIP) Andrea SERVIDA European Commission DG INFSO.A3

EU policy on Network and Information Security & Critical Information Infrastructures Protection

HEALTH INFORMATION INFRASTRUCTURE PROJECT: PROGRESS REPORT

In Accountable IoT We Trust

White Paper. The Impact of Payment Services Directive II (PSD2) on Authentication & Security

Sector(s) Public administration- Information and communications (50%), General public administration sector (50%)

ITU Asia-Pacific Centres of Excellence Training on Conformity and Interoperability. Session 2: Conformity Assessment Principles

ACCAB. Accreditation Commission For Conformity Assessment Bodies

ENISA S WORK ON ICS AND SMART GRID SECURITY

Innovation in Horizon 2020: From ehealth Policy Strategy to funding instrument

Implementation of cross-border eprescription services. Päivi Hämäläinen, THL, Finland 14 May ehealth Forum, Athens

ehealth Interoperability Workshop the Government and Expert View CEN/ISSS ehealth Standardization Focus Group, targets and work plan

Transcription:

How the European Commission is supporting innovation in mobile health technologies Nordic Mobile Healthcare Technology Congress 2015 Claudia Prettner, Unit for Health and Well-Being, DG CONNECT

Table of Contents i. mhealth market ii. mhealth transformation of health services iii. mhealth initiatives on: a) Privacy and security b) Quality and transparency c) Legal framework

90% of mhealth apps remain free 36 apps account for half of all downloads 165,000 mhealth apps available wearables as new trend number of mhealth apps increased over 100% from 2013 to 2015

mhealth app categories

How mhealth transforms the way health services are managed

Mobile devices allow to collect big amounts of data...

Green Paper on mhealth The Green Paper asked stakeholders for their inputs on how to overcome the main challenges to mhealth deployment, e.g.: data protection the legal framework patient safety mhealth s role in healthcare systems international cooperation and web entrepreneurs' market access

Privacy and security Quality and transparency Legal framework

Privacy and security

Results of the consultation - Privacy and security Strong privacy and security tools are needed to build users' trust Data encryption both "in transit" and "at rest" Authentication mechanisms, e.g. digital certificates, biometric parameters, tokens etc. User's consent and access controls are crucial Importance of secured networks settings to prevent data interception

Current lack of trust Source: Mobiquity, The Appification of Health and Fitness, April 2014

Actions: Privacy and security Action: Code of conduct on mobile health apps covering data protection and security principles; voluntary instrument; to be signed by mhealth app developers and possibly to be approved by the Article 29 Working Party; Legal basis: Article 27 of the Data Protection Directive; Objectives: Increased trust; Raising awareness and facilitating compliance with data protection rules at EU level; Competitive advantage.

Actions: Privacy and security Action: Code of conduct on mobile health apps Process: Industry code of conduct working group with the EC as facilitator. Next steps: Meeting on 7 December presentation of 1st draft. More info: http://bit.ly/1povxro Security Actions: ENISA project on security and resilience for ehealth networks and infrastructures Research & Innovation action under WP 2016/17 "Increasing digital security of health related data on a systemic level"

Quality and transparency

Results of the consultation Quality and transparency Need for certification schemes to assess mhealth apps Sharing and transferring best practices Importance of standards for patient safety Setting-up of (national) bodies to review mhealth apps

Actions: Quality and transparency Action: Guidelines for assessing validity and reliability of mhealth app data to be linked with electronic health records the guidelines could be used by public authorities, health care providers, professional and patients associations and others Action: Facilitate the development of a European standard on quality criteria for health and wellness apps providing guidance and principles for health and wellness app developers to follow throughout the app project life cycle (including development, testing, releasing and updating of an app)

Guidelines for assessing validity and reliability of mhealth app data A working group of various stakeholder organisations Civil society, academia, industry, public authorities Expertise: medical, health policy, health IT, standardisation, certification, patient empowerment, etc Mandate Draft the guidelines by the end of 2016 Consider and integrate input from all the stakeholders Public call for expression of interest open until 04 December 2015 Process open to all stakeholders via online consultations and open stakeholder meetings More information http://bit.ly/1iaps7p

Legal framework

Results of the consultation Legal framework Safety and performance requirements of lifestyle and wellbeing apps should be covered by legislation, soft law or quality labelling/certification Need to clarify the borderline between "medical" and "lifestyle and wellbeing" apps Need for strengthened enforcement of medical device and data protection legislation

Actions: Legal framework Unclear application of EU rules on medical devices Action: Revision of manual on borderline and classification and MEDDEV guidance (finalization after MD regulations adoption) Lack of protection in case of unsafe or defective digital products (e.g. lifestyle and wellbeing apps) Action: Making consumer protection and ecommerce legislation fit for new technologies

Thank you for your attention! claudia.prettner@ec.europa.eu