Consent management is a system, process or set of policies for allowing consumers to determine information they are willing to permit their various providers to access. This allows individuals to control their own
information privacy
Information privacy is the relationship between the collection and dissemination of data, technology, the public expectation of privacy, contextual information norms, and the legal and political issues surrounding them. It is also known as dat ...
and how that information is collected and used, often within the context of digital platforms and
data privacy
Information privacy is the relationship between the collection and dissemination of data, technology, the public expectation of privacy, contextual information norms, and the legal and political issues surrounding them. It is also known as data ...
regulations.
It was originally related specifically to health care but has expanded to include consent about all electronic information about individuals that include what data is collected, how it is used and provide them the ability to manage their consent choices.
History
Originally consent management was related to health care as medical records started to become stored and shared electronically. It was to enable patients and consumers to affirm their participation in e-health initiatives and to establish consent directives to determine who will have access to their
protected health information
Protected health information (PHI) under Law of the United States, U.S. law is any information about health status, provision of health care, or payment for health care that is created or collected by a Covered Entity (or a Business Associate of a ...
(PHI), for what purpose and under what circumstances.
After
GDPR
The General Data Protection Regulation (Regulation (EU) 2016/679), abbreviated GDPR, is a European Union regulation on information privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR is an important component of ...
was established in
Europe
Europe is a continent located entirely in the Northern Hemisphere and mostly in the Eastern Hemisphere. It is bordered by the Arctic Ocean to the north, the Atlantic Ocean to the west, the Mediterranean Sea to the south, and Asia to the east ...
after 2016, consent management became more widely used and started to include managing of private information and their access by any provider (like
online
In computer technology and telecommunications, online indicates a state of connectivity, and offline indicates a disconnected state. In modern terminology, this usually refers to an Internet connection, but (especially when expressed as "on lin ...
advertisers
Advertising is the practice and techniques employed to bring attention to a Product (business), product or Service (economics), service. Advertising aims to present a product or service in terms of utility, advantages, and qualities of int ...
). Consent management should supports the dynamic creation, management and enforcement of consumer, organizational and jurisdictional privacy policies.
Standards
The need to accommodate and automate
consumer privacy
Consumer privacy is information privacy as it relates to the consumers of products and services.
A variety of social, legal and political issues arise from the interaction of the public's potential expectation of privacy and the collection and d ...
preferences in
health information exchange
Health Information Exchange (HIE) is the electronic exchange of health care information across organizations within a region, community, or hospital system. Participants in this data exchange are collectively called Health Information Networks (HI ...
was recognized by the healthcare industry through various standards activities and consent discussions:
* American
Medical Informatics
Health informatics combines communications, information technology (IT), and health care to enhance patient care and is at the forefront of the medical technological revolution. It can be viewed as a branch of engineering and applied science.
...
Association (AMIA)
* Canada Health Infoway
* Information Security and Privacy Collaboration
* Health
information technology
Information technology (IT) is a set of related fields within information and communications technology (ICT), that encompass computer systems, software, programming languages, data processing, data and information processing, and storage. Inf ...
Standards Panel (HITSP)
*
Health Level 7
Health Level Seven, abbreviated to HL7, is a range of global standards for the transfer of clinical and administrative health data between applications with the aim to improve patient outcomes and health system performance. The HL7 standards focu ...
* Basic Patient Privacy Consents (
Integrating the Healthcare Enterprise
Integration may refer to:
Biology
*Multisensory integration
*Path integration
* Pre-integration complex, viral genetic material used to insert a viral genome into a host genome
*DNA integration, by means of site-specific recombinase technology, ...
)
* Advanced Patient Privacy Consents (
Integrating the Healthcare Enterprise
Integration may refer to:
Biology
*Multisensory integration
*Path integration
* Pre-integration complex, viral genetic material used to insert a viral genome into a host genome
*DNA integration, by means of site-specific recombinase technology, ...
)
*
(OASIS)
*
Interactive Advertising Bureau
The Interactive Advertising Bureau (IAB) is an American advertising business organization that develops industry standards, conducts research, and provides legal support for the online advertising industry. The organization represents many of t ...
(IAB) Europe: List of Consent Management Provider
References
{{DEFAULTSORT:Consent Management
Health policy in the United States
Information privacy
Data protection