{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T08:02:43Z","timestamp":1790841763452,"version":"4.1.0"},"reference-count":77,"publisher":"Cambridge University Press (CUP)","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["cambridge.org"],"crossmark-restriction":true},"short-container-title":["HEPL"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Digital health technologies (DHTs) can improve healthcare delivery but also raise concerns about data protection and cybersecurity. Germany and Switzerland take contrasting approaches to these issues in reimbursement decision-making: in Germany, the Fast-Track procedure assigns explicit responsibility to the Federal Institute for Drugs and Medical Devices (BfArM) for evaluating data protection and cybersecurity, whereas in Switzerland no dedicated procedure exists at the reimbursement level, and these issues are treated as having been addressed at the market access stage. This study compares how data protection and cybersecurity are handled in relation to reimbursement decision-making for DHTs in both countries. We conducted a document analysis and semi-structured interviews with experts from industry and public authorities and used reflexive thematic analysis to examine the material. Interviewees in both countries reported uncertainty among stakeholders about the role of reimbursement authorities and identified limited resources and a lack of relevant expertise as important constraints. Our findings suggest that greater reliance on international standards may reduce overlap between market access and reimbursement, support clearer allocation of responsibilities, enable more predictable pathways, and help balance security with innovation. In smaller markets, additional country-specific requirements may discourage market entry and limit patient access to DHTs.<\/jats:p>","DOI":"10.1017\/s1744133126100735","type":"journal-article","created":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T07:50:22Z","timestamp":1790841022000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1017\/policypage","source":"Crossref","is-referenced-by-count":0,"title":["Evaluating information security in reimbursement decisions for digital health technologies in Germany and Switzerland \u2013 stretching the fourth hurdle too far?"],"prefix":"10.1017","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-4006-2125","authenticated-orcid":false,"given":"Benjamin","family":"Wyss","sequence":"first","affiliation":[{"id":[{"id":"https:\/\/ror.org\/02k7v4d05","id-type":"ROR","asserted-by":"publisher"}],"name":"University of Bern"},{"id":[{"id":"https:\/\/ror.org\/01q9sj412","id-type":"ROR","asserted-by":"publisher"}],"name":"Swiss Institute for Translational and Entrepreneurial Medicine (sitem-insel)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Carl Rudolf","family":"Blankart","sequence":"additional","affiliation":[{"id":[{"id":"https:\/\/ror.org\/02k7v4d05","id-type":"ROR","asserted-by":"publisher"}],"name":"University of Bern"},{"id":[{"id":"https:\/\/ror.org\/01q9sj412","id-type":"ROR","asserted-by":"publisher"}],"name":"Swiss Institute for Translational and Entrepreneurial Medicine (sitem-insel)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"56","published-online":{"date-parts":[[2026,10,1]]},"reference":[{"key":"S1744133126100735_ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.healthpol.2024.105164"},{"key":"S1744133126100735_ref46","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2016.185"},{"key":"S1744133126100735_ref36","doi-asserted-by":"publisher","DOI":"10.1017\/S0266462306050781"},{"key":"S1744133126100735_ref1","doi-asserted-by":"publisher","DOI":"10.1038\/s41746-024-01232-3"},{"key":"S1744133126100735_ref52","doi-asserted-by":"publisher","DOI":"10.1177\/1049732315617444"},{"key":"S1744133126100735_ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.jad.2017.04.046"},{"key":"S1744133126100735_ref26","doi-asserted-by":"publisher","DOI":"10.1038\/s41746-022-00573-1"},{"key":"S1744133126100735_ref67","doi-asserted-by":"publisher","DOI":"10.1016\/j.healthpol.2022.09.012"},{"key":"S1744133126100735_ref11","unstructured":"Bundesamt f\u00fcr Gesundheit BAG (2024) Antragsprozesse Mittel- und Gegenst\u00e4ndeliste. October 3. Available at https:\/\/www.bag.admin.ch\/de\/antragsprozesse-mittel-und-gegenstaendeliste (accessed 3 October 2024)."},{"key":"S1744133126100735_ref48","doi-asserted-by":"publisher","DOI":"10.1017\/S0266462309990638"},{"key":"S1744133126100735_ref16","unstructured":"Bundesversammlung (2022) Amtliches Bulletin. Fragestunde. 22.7788. Frage Humbel Ruth. Digitale Gesundheitsanwendungen zur Verbesserung von Patientensicherheit und Kosteneffektivit\u00e4t. September 26."},{"key":"S1744133126100735_ref74","doi-asserted-by":"publisher","DOI":"10.1017\/S026646232000015X"},{"key":"S1744133126100735_ref53","doi-asserted-by":"publisher","DOI":"10.1038\/s41746-024-01147-z"},{"key":"S1744133126100735_ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s00330-023-09860-1"},{"key":"S1744133126100735_ref13","unstructured":"Bundesinstitut f\u00fcr Arzneimittel und Medizinprodukte (2023) Das Fast-Track-Verfahren f\u00fcr digitale Gesundheitsanwendungen (DiGA) nach \u00a7 139e SGB V. Ein Leitfaden f\u00fcr Hersteller, Leistungserbringer und Anwender. Version 3.4 vom 11.10.2023."},{"key":"S1744133126100735_ref17","doi-asserted-by":"publisher","DOI":"10.1177\/1744987120927206"},{"key":"S1744133126100735_ref69","doi-asserted-by":"publisher","DOI":"10.1177\/17816858221136106"},{"key":"S1744133126100735_ref24","unstructured":"eHealth Suisse (2022) Leitfaden f\u00fcr App-Entwickler, Hersteller und Inverkehrbringer. Praktische Hinweise. April 7. Available at https:\/\/www.e-health-suisse.ch\/payload\/api\/documents\/file\/Leitfaden_App_Entwickler.pdf (accessed 13 October 2024)."},{"key":"S1744133126100735_ref6","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365-2648.1994.tb01088.x"},{"key":"S1744133126100735_ref2","unstructured":"Agoria and beMedTech (n.d.) Validation pyramid. Available at https:\/\/mhealthbelgium.be\/validation-pyramid (accessed 22 November 2024)."},{"key":"S1744133126100735_ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.cvdhj.2022.09.002"},{"key":"S1744133126100735_ref38","unstructured":"Jeindl, R and Wild, C (2020) Framework zur Unterst\u00fctzung von Refundierungsentscheidungen zu digitalen Gesundheitsanwendungen (mHealth) und dessen (retrospektive) Anwendung an ausgew\u00e4hlten Beispielen. AIHTA Projektbericht Nr.: 134. HTA Austria \u2013 Austrian Institute for Health Technology Assessment GmbH. Available at https:\/\/eprints.aihta.at\/1279\/1\/HTA-Projektbericht_Nr.134.pdf (accessed 14 August 2024)."},{"key":"S1744133126100735_ref9","doi-asserted-by":"publisher","DOI":"10.1191\/1478088706qp063oa"},{"key":"S1744133126100735_ref65","doi-asserted-by":"publisher","DOI":"10.3390\/su12177002"},{"key":"S1744133126100735_ref68","doi-asserted-by":"publisher","DOI":"10.1017\/S1744133123000208"},{"key":"S1744133126100735_ref8","doi-asserted-by":"publisher","DOI":"10.48620\/87541"},{"key":"S1744133126100735_ref23","unstructured":"eHealth Suisse (2017) Mobile Health (mHealth) Empfehlungen I. March 1. Available at https:\/\/www.e-health-suisse.ch\/fileadmin\/user_upload\/Dokumente\/2017\/D\/170316_mHealth_Empfehlungen_I_d.pdf (accessed 8 December 2023)."},{"key":"S1744133126100735_ref33","doi-asserted-by":"publisher","DOI":"10.23996\/fjhw.82538"},{"key":"S1744133126100735_ref59","doi-asserted-by":"publisher","DOI":"10.1177\/2516043520975926"},{"key":"S1744133126100735_ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSEE.2012.193"},{"key":"S1744133126100735_ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s00103-025-04091-9"},{"key":"S1744133126100735_ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.jval.2016.12.010"},{"key":"S1744133126100735_ref10","doi-asserted-by":"publisher","DOI":"10.1080\/2159676X.2019.1628806"},{"key":"S1744133126100735_ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.healthpol.2021.07.010"},{"key":"S1744133126100735_ref12","unstructured":"Bundesamt f\u00fcr Gesundheit BAG (2025) Antrag auf Aufnahme des folgenden Produktes auf die Mittel- und Gegenst\u00e4ndeliste (MiGeL) oder Anpassung der folgenden Position in der MiGeL. July 22. Available at https:\/\/www.bag.admin.ch\/de\/antragsprozesse-mittel-und-gegenstaendeliste (accessed 21 August 2025)."},{"key":"S1744133126100735_ref75","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-11929-4"},{"key":"S1744133126100735_ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.maturitas.2018.04.008"},{"key":"S1744133126100735_ref42","unstructured":"Kassner, A (2023) Ein Blick in die DiGA-Welt: Medizinprodukte der Risikoklasse IIb sollen zuk\u00fcnftig \u00fcber DiGA erstattungsf\u00e4hig werden. May 19. Available at https:\/\/roxhealth.com\/de\/2023\/05\/19\/medizinprodukte-der-risikoklasse-2-b-sollen-diga-werden\/ (accessed 28 November 2024)."},{"key":"S1744133126100735_ref15","unstructured":"Bundesinstitut f\u00fcr Arzneimittel und Medizinprodukte (n.d.) Risikoklasse IIb. Available at https:\/\/www.bfarm.de\/DE\/Medizinprodukte\/_FAQ\/DigiG\/Risikoklasse-IIb\/faq-liste.html?cms_fid=1742088 (accessed 10 February 2025)."},{"key":"S1744133126100735_ref31","doi-asserted-by":"publisher","DOI":"10.1177\/1094428112452151"},{"key":"S1744133126100735_ref19","doi-asserted-by":"publisher","DOI":"10.1515\/zfsoz-1990-0602"},{"key":"S1744133126100735_ref55","volume-title":"Basler Kommentar. Heilmittelgesetz, 2. Auflage","author":"Meier","year":"2022"},{"key":"S1744133126100735_ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.ibusrev.2022.102097"},{"key":"S1744133126100735_ref72","doi-asserted-by":"publisher","DOI":"10.1093\/intqhc\/mzm042"},{"key":"S1744133126100735_ref73","volume-title":"Information Security Education. Empowering People Through Information Security Education. WISE 2025. IFIP Advances in Information and Communication Technology","volume":"742","author":"Tronnier","year":"2025"},{"key":"S1744133126100735_ref14","unstructured":"Bundesinstitut f\u00fcr Arzneimittel und Medizinprodukte (2025) Das Fast-Track-Verfahren f\u00fcr digitale Gesundheitsanwendungen (DiGA) nach \u00a7 139e SGB V. Ein Leitfaden f\u00fcr Hersteller, Leistungserbringer und Anwender. Version 3.6 vom 10.12.2025."},{"key":"S1744133126100735_ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.socscimed.2024.116620"},{"key":"#cr-split#-S1744133126100735_ref40.1","unstructured":"Joint Artificial Intelligence Board and Medical Device Coordination Group (2025) AIB 2025-1"},{"key":"#cr-split#-S1744133126100735_ref40.2","unstructured":"MDCG 2025-6 Interplay between the Medical Devices Regulation (MDR) & In Vitro Diagnostic Medical Devices Regulation (IVDR) and the Artificial Intelligence Act (AIA). June. Available at https:\/\/health.ec.europa.eu\/document\/download\/b78a17d7-e3cd-4943-851d-e02a2f22bbb4_en?filename=mdcg_2025-6_en.pdf (accessed 25 March 2026)."},{"key":"S1744133126100735_ref61","doi-asserted-by":"publisher","DOI":"10.1002\/pds.600"},{"key":"S1744133126100735_ref4","doi-asserted-by":"publisher","DOI":"10.3390\/info14120640"},{"key":"S1744133126100735_ref41","doi-asserted-by":"publisher","DOI":"10.1111\/jan.13031"},{"key":"S1744133126100735_ref64","doi-asserted-by":"publisher","DOI":"10.12968\/ijtr.2009.16.6.42433"},{"key":"S1744133126100735_ref3","unstructured":"Allianz Digitale Transformation im Gesundheitswesen (2024) Positionspapier Verg\u00fctung digitaler Gesundheitsanwendungen in der Schweiz. May 27. Available at https:\/\/adtg.ch\/wp-content\/uploads\/2024\/07\/Positionspapier-Verguetung-DiGA-ADTG-5-2024.pdf (accessed 14 August 2024)."},{"key":"S1744133126100735_ref63","doi-asserted-by":"publisher","DOI":"10.1186\/1472-6963-8-194"},{"key":"S1744133126100735_ref44","doi-asserted-by":"publisher","DOI":"10.2196\/49003"},{"key":"S1744133126100735_ref22","volume-title":"All Politics Is Global: Explaining International Regulatory Regimes","author":"Drezner","year":"2008"},{"key":"S1744133126100735_ref21","doi-asserted-by":"publisher","DOI":"10.1007\/s10869-021-09732-9"},{"key":"S1744133126100735_ref28","doi-asserted-by":"publisher","DOI":"10.3390\/healthcare9010062"},{"key":"S1744133126100735_ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s10354-021-00881-3"},{"key":"S1744133126100735_ref34","doi-asserted-by":"publisher","DOI":"10.1017\/S0266462321000362"},{"key":"S1744133126100735_ref30","doi-asserted-by":"publisher","DOI":"10.1002\/smj.4250120604"},{"key":"S1744133126100735_ref45","first-page":"13","article-title":"Verg\u00fctung von digitalen Gesundheitsanwendungen (DiGA) in der Schweiz","volume":"1","author":"Kohler","year":"2023","journal-title":"Life Science Recht"},{"key":"S1744133126100735_ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.addr.2021.113958"},{"key":"S1744133126100735_ref62","doi-asserted-by":"publisher","DOI":"10.1002\/hec.2830"},{"key":"S1744133126100735_ref66","doi-asserted-by":"publisher","DOI":"10.1080\/21614083.2021.2014047"},{"key":"S1744133126100735_ref54","unstructured":"Medical Device Coordination Group (2020) MDCG 2019-16 Rev.1 Guidance on Cybersecurity for Medical Devices. Available at https:\/\/health.ec.europa.eu\/system\/files\/2022-01\/md_cybersecurity_en.pdf (accessed 13 October 2023)."},{"key":"S1744133126100735_ref56","volume-title":"Qualitativ-empirische Sozialforschung: Konzepte, Methoden, Analysen","author":"Meuser","year":"1991"},{"key":"S1744133126100735_ref35","volume-title":"Basler Kommentar. Datenschutzgesetz \/ \u00d6ffentlichkeitsgesetz, 4. Auflage","author":"Huber","year":"2024"},{"key":"S1744133126100735_ref37","doi-asserted-by":"publisher","DOI":"10.23996\/fjhw.111776"},{"key":"S1744133126100735_ref58","doi-asserted-by":"publisher","DOI":"10.1017\/S026646231800051X"},{"key":"S1744133126100735_ref70","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.329.7472.972"},{"key":"S1744133126100735_ref71","doi-asserted-by":"publisher","DOI":"10.1016\/j.hlpt.2021.100549"},{"key":"S1744133126100735_ref25","unstructured":"Eidgen\u00f6ssisches Departement des Innern EDI (2024) Faktenblatt: Verg\u00fctung von digitalen Gesundheitsanwendungen im Rahmen der OKP. November. Available at https:\/\/www.bag.admin.ch\/dam\/bag\/de\/dokumente\/kuv-leistungen\/leistungen-und-tarife\/faktenbatt-verguetung-dig-anwendungen-vers112024.pdf.download.pdf\/Faktenblatt_Verg%C3%BCtung%20digitale%20Anwendungen_Version%20Nov%2024_DE.pdf (accessed 14 January 2025)."},{"key":"S1744133126100735_ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.socscimed.2024.116847"},{"key":"S1744133126100735_ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.csbj.2025.07.024"},{"key":"S1744133126100735_ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102820"}],"container-title":["Health Economics, Policy and Law"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.cambridge.org\/core\/services\/aop-cambridge-core\/content\/view\/S1744133126100735","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T07:50:32Z","timestamp":1790841032000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.cambridge.org\/core\/product\/identifier\/S1744133126100735\/type\/journal_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10,1]]},"references-count":77,"alternative-id":["S1744133126100735"],"URL":"https:\/\/doi.org\/10.1017\/s1744133126100735","relation":{},"ISSN":["1744-1331","1744-134X"],"issn-type":[{"value":"1744-1331","type":"print"},{"value":"1744-134X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,10,1]]},"assertion":[{"value":"\u00a9 The Author(s), 2026. Published by Cambridge University Press","name":"copyright","label":"Copyright","group":{"name":"copyright_and_licensing","label":"Copyright and Licensing"}},{"value":"This is an Open Access article, distributed under the terms of the Creative Commons Attribution licence (https:\/\/creativecommons.org\/licenses\/by\/4.0\/), which permits unrestricted re-use, distribution and reproduction, provided the original article is properly cited.","name":"license","label":"License","group":{"name":"copyright_and_licensing","label":"Copyright and Licensing"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}