Digital health information systems (DHIS) are increasingly members of ecosystems, collecting, using and sharing a huge amount of personal health information (PHI), frequently without control and authorization through the data subject. From the data subject’s perspective, there is frequently no guarantee and therefore no trust that PHI is processed ethically in Digital Health Ecosystems. This results in new ethical, privacy and trust challenges to be solved. The authors’ objective is to find a combination of ethical principles, privacy and trust models, together enabling design, implementation of DHIS acting ethically, being trustworthy, and supporting the user’s privacy needs. Research published in journals, conference proceedings, and standards documents is analyzed from the viewpoint of ethics, privacy and trust. In that context, systems theory and systems engineering approaches together with heuristic analysis are deployed. The ethical model proposed is a combination of consequentialism, professional medical ethics and utilitarianism. Privacy enforcement can be facilitated by defining it as health information specific contextual intellectual property right, where a service user can express their own privacy needs using computer-understandable policies. Thereby, privacy as a dynamic, indeterminate concept, and computational trust, deploys linguistic values and fuzzy mathematics. The proposed solution, combining ethical principles, privacy as intellectual property and computational trust models, shows a new way to achieve ethically acceptable, trustworthy and privacy-enabling DHIS and Digital Health Ecosystems.

A transformed health ecosystem is a multi-stakeholder coalition that collects, stores, and shares personal health information (PHI) for different purposes, such as for personalized care, prevention, health prediction, precise medicine, personal health management, and public health purposes. Those services are data driven, and a lot of PHI is needed not only from received care and treatments, but also from a person’s normal life. Collecting, processing, storing, and sharing of the huge amount of sensitive PHI in the ecosystem cause many security, privacy, and trust challenges to be solved. The authors have studied those challenges from different perspectives using existing literature and found that current security and privacy solutions are insufficient, and for the user it is difficult to know whom to trust, and how much. Furthermore, in today’s widely used privacy approaches, such as privacy as choice or control and belief or perception based trust does not work in digital health ecosystems. The authors state that it is necessary to redefine the way privacy and trust are understood in health, to develop new legislation to support new privacy and approaches, and to force the stakeholders of the health ecosystem to make their privacy and trust practices and features of their information systems available. The authors have also studied some candidate solutions for security, privacy, and trust to be used in future health ecosystems.

The advancement of sciences and technologies, economic challenges, increasing expectations, and consumerism result in a radical transformation of health and social care around the globe, characterized by foundational organizational, methodological, and technological paradigm changes. The transformation of the health and social care ecosystems aims at ubiquitously providing personalized, preventive, predictive, participative precision (5P) medicine, considering and understanding the individual’s health status in a comprehensive context from the elementary particle up to society. For designing and implementing such advanced ecosystems, an understanding and correct representation of the structure, function, and relations of their components is inevitable, thereby including the perspectives, principles, and methodologies of all included disciplines. To guarantee consistent and conformant processes and outcomes, the specifications and principles must be based on international standards. A core standard for representing transformed health ecosystems and managing the integration and interoperability of systems, components, specifications, and artifacts is ISO 23903:2021, therefore playing a central role in this publication. Consequently, ISO/TC 215 and CEN/TC 251, both representing the international standardization on health informatics, declared the deployment of ISO 23903:2021 mandatory for all their projects and standards addressing more than one domain. The paper summarizes and concludes the first author’s leading engagement in the evolution of pHealth in Europe and beyond over the last 15 years, discussing the concepts, principles, and standards for designing, implementing, and managing 5P medicine ecosystems. It not only introduces the theoretical foundations of the approach but also exemplifies its deployment in practical projects and solutions regarding interoperability and integration in multi-domain ecosystems. The presented approach enables comprehensive and consistent integration of and interoperability between domains, systems, related actors, specifications, standards, and solutions. That way, it should help overcome the problems and limitations of data-centric approaches, which still dominate projects and products nowadays, and replace them with knowledge-centric, comprehensive, and consistent ones.

For meeting the challenge of aging, multi-diseased societies, cost containment, workforce development and consumerism by improved care quality and patient safety as well as more effective and efficient care processes, health and social care systems around the globe undergo an organizational, methodological and technological transformation towards personalized, preventive, predictive, participative precision medicine (P5 medicine). This paper addresses chances, challenges and risks of specific disruptive methodologies and technologies for the transformation of health and social care systems, especially focusing on the deployment of intelligent and autonomous systems.

The use of eHealth and healthcare services are becoming increasingly common across networks and ecosystems. Identifying the quality and health impact of these services is a big problem that in many cases it is difficult determine. Health ecosystems are seldom designed with privacy and trust in mind, and the service user has almost no way of knowing how much trust to place in the service provider and other stakeholders using his or her personal health information (PHI). In addition, the service user cannot rely on privacy laws, and the ecosystem is not a trustworthy system. This demonstrates that, in real life, the user does not have significant privacy. Therefore, before starting to use eHealth services and subsequently disclosing personal health information (PHI), the user would benefit from tools to measure the level of privacy and trust the ecosystem can offer. For this purpose, the authors developed a solution that enables the service user to calculate a Merit of Service (Fuzzy attractiveness rating (FAR)) for the service provider and for the network where PHI is processed. A conceptual model for an eHealth ecosystem was developed. With the help of heuristic methods and system and literature analysis, a novel proposal to identify trust and privacy attributes focused on eHealth was developed. The FAR value is a combination of the service network’s privacy and trust features, and the expected health impact of the service. The computational Fuzzy linguistic method was used to calculate the FAR. For user friendliness, the Fuzzy value of Merit was transformed into a linguistic Fuzzy label. Finally, an illustrative example of FAR calculation is presented.

Digital transformation is widely understood as a process where technology is used to modify an organization’s products and services and to create new ones. It is rapidly advancing in all sectors of society. Researchers have shown that it is a multidimensional process determined by human decisions based on ideologies, ideas, beliefs, goals, and the ways in which technology is used. In health care and health, the end result of digital transformation is digital health. In this study, a detailed literature review covering 560 research articles published in major journals was performed, followed by an analysis of ideas, beliefs, and goals guiding digital transformation and their possible consequences for privacy, human rights, dignity, and autonomy in health care and health. Results of literature analyses demonstrated that from the point of view of privacy, dignity, and human rights, the current laws, regulations, and system architectures have major weaknesses. One possible model of digital health is based on the dominant ideas and goals of the business world related to the digital economy and neoliberalism, including privatization of health care services, monetization and commodification of health data, and personal responsibility for health. These ideas represent meaningful risks to human rights, privacy, dignity, and autonomy. In this paper, we present an alternative solution for digital health called human-centric digital health (HCDH). Using system thinking and system modeling methods, we developed a system model for HCDH. It uses 5 views (ideas, health data, principles, regulation, and organizational and technical innovations) to align with human rights and values and support dignity, privacy, and autonomy. To make HCDH future proof, extensions to human rights, the adoption of the principle of restricted informational ownership of health data, and the development of new duties, responsibilities, and laws are needed. Finally, we developed a system-oriented, architecture-centric, ontology-based, and policy-driven approach to represent and manage HCDH ecosystems.