Confidentiality and Privacy

The recommendations included in this group are intended to ensure the protection data guarantees required in the Health App, given that the health information has an special protected character, as well as the security mechanisms implemented by an App in order to ensure the privacy and confidentiality of the information.

Privacy and Data Protection

Recommendation 21. Before downloading and installing, the health App informs about the kind of user’s data to be collected and the reason, about the access policies and data treatment, and about possible commercial agreements with third parties.

Recommendation 22.The health App clearly describes the terms and conditions about recorded personal data.

Recommendation 23.The functioning of the health App preserves privacy in the recorded information, collects express consents granted by users, and warns of risks coming from the use of online mobile health Apps.

Recommendation 24. The health App ensures pertinent security measures when users’ health information or sensitive data has to be collected or exchanged.

Recommendation 25. The health App informs the users when it has access to other resources of the device, to users’ accounts and to profiles in social networks.

Recommendation 26. The health App ensures the right of access to recorded information and the updates regarding changes in its privacy policy.

Recommendation 27. The health App has measures regarding minors’ protection in accordance with the current legislation.

Logical Security

Recommendation 28. The health App neither presents no sort of known susceptibility nor any type of malicious code.

Recommendation 29. The health App describes the security procedures established in order to avoid unauthorised access to personal data collected, as well as to limit the access by third parties.

Recommendation 30. The health App has encryption mechanisms for the storage and exchange of information, as well as mechanisms for passwords management.

Recommendation 31. When the health App uses services from the Cloud (cloud computing), the terms and conditions of those services are declared, and the pertinent security measures are ensured.