{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,24]],"date-time":"2026-09-24T23:55:43Z","timestamp":1790294143287,"version":"4.1.0"},"reference-count":86,"publisher":"JMIR Publications Inc.","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JMIR Form Res"],"abstract":"<jats:sec>\n                    <jats:title>Background<\/jats:title>\n                    <jats:p>Privacy in our digital world is a very complicated topic, especially when meeting cloud computing technological achievements with its multidimensional context. Here, privacy is an extended concept that is sometimes referred to as legal, philosophical, or even technical. Consequently, there is a need to harmonize it with other aspects in health care in order to provide a new ecosystem. This new ecosystem can lead to a paradigm shift involving the reconstruction and redesign of some of the most important and essential requirements like privacy concepts, legal issues, and security services. Cloud computing in the health domain has markedly contributed to other technologies, such as mobile health, health Internet of Things, and wireless body area networks, with their increasing numbers of embedded applications. Other dependent applications, which are usually used in health businesses like social networks, or some newly introduced applications have issues regarding privacy transparency boundaries and privacy-preserving principles, which have made policy making difficult in the field.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Objective<\/jats:title>\n                    <jats:p>One way to overcome this challenge is to develop a taxonomy to identify all relevant factors. A taxonomy serves to bring conceptual clarity to the set of alternatives in in-person health care delivery. This study aimed to construct a comprehensive taxonomy for privacy in the health cloud, which also provides a prospective landscape for privacy in related technologies.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Methods<\/jats:title>\n                    <jats:p>A search was performed for relevant published English papers in databases, including Web of Science, IEEE Digital Library, Google Scholar, Scopus, and PubMed. A total of 2042 papers were related to the health cloud privacy concept according to predefined keywords and search strings. Taxonomy designing was performed using the deductive methodology.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Results<\/jats:title>\n                    <jats:p>This taxonomy has 3 layers. The first layer has 4 main dimensions, including cloud, data, device, and legal. The second layer has 15 components, and the final layer has related subcategories (n=57). This taxonomy covers some related concepts, such as privacy, security, confidentiality, and legal issues, which are categorized here and defined by their expansion and distinctive boundaries. The main merits of this taxonomy are its ability to clarify privacy terms for different scenarios and signalize the privacy multidisciplinary objectification in eHealth.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Conclusions<\/jats:title>\n                    <jats:p>This taxonomy can cover health industry requirements with its specifications like health data and scenarios, which are considered as the most complicated among businesses and industries. Therefore, the use of this taxonomy could be generalized and customized to other domains and businesses that have less complications. Moreover, this taxonomy has different stockholders, including people, organizations, and systems. If the antecedent effort in the taxonomy is proven, subject matter experts could enhance the extent of privacy in the health cloud by verifying, evaluating, and revising this taxonomy.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.2196\/38372","type":"journal-article","created":{"date-parts":[[2024,2,12]],"date-time":"2024-02-12T09:00:30Z","timestamp":1707728430000},"page":"e38372","source":"Crossref","is-referenced-by-count":21,"title":["Privacy, Security, and Legal Issues in the Health Cloud: Structured Review for Taxonomy Development"],"prefix":"10.2196","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4786-9083","authenticated-orcid":false,"given":"Zahra","family":"Zandesh","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1010","published-online":{"date-parts":[[2024,2,12]]},"reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-020-03106-1"},{"key":"ref2","unstructured":"MellPGranceTThe NIST Definition of Cloud ComputingNIST-National Institute of Standars and Technology20112024-01-04https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800-145.pdf"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2019.103953"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102481"},{"key":"ref5","first-page":"89","author":"Li, M","year":"2010","journal-title":"Security and Privacy in Communication Networks. SecureComm 2010. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 50"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.2196\/jmir.2076"},{"key":"ref7","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-23633-9","author":"Gkoulalas-Divanis, A","year":"2015","journal-title":"Medical Data Privacy Handbook"},{"key":"ref8","first-page":"71","author":"Johnson, ME","year":"2009","journal-title":"Financial Cryptography and Data Security. FC 2009. Lecture Notes in Computer Science, vol 5628"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.2196\/jmir.2494"},{"key":"ref10","unstructured":"DimickCEHRs Prove a Difficult Witness in CourtAmerican Health Information Management Association20102024-01-04https:\/\/bok.ahima.org\/doc?oid=102634"},{"key":"ref11","first-page":"140","author":"Biswas, G","year":"2015","journal-title":"Recent Advances in Forensic Medicine & Toxicology (Volume 1)"},{"key":"ref12","unstructured":"Data ownershipResponsible Conduct of Research2024-01-04https:\/\/ori.hhs.gov\/education\/products\/n_illinois_u\/datamanagement\/dotopic.html"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/cloud.2017.95"},{"key":"ref14","unstructured":"MgoziTWeeksRErasmusLCloud computing impact on healthcare in South Africa201524th International Conference of the International Association for Management of TechnologyJune 8-11, 2015Cape Town, South Africa"},{"key":"ref15","year":"2009","journal-title":"Bill of patient rights in Iran (vol. 387956)"},{"key":"ref16","unstructured":"AlivandFLegal aspects of medical recordsAlborz University of Medical Sciences20132019-08-01https:\/\/abzums.ac.ir\/"},{"issue":"12","key":"ref17","first-page":"853","volume":"26","author":"Mogli, GD","year":"1972","journal-title":"Indian J Med Sci"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.3390\/s20113078"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.2174\/2666255813666200224092717"},{"key":"ref20","unstructured":"IwayaLHEngineering privacy for mobile health data collection systems in the primary careKarlstad University20192024-01-04https:\/\/www.diva-portal.org\/smash\/get\/diva2:1266242\/FULLTEXT02.pdf"},{"key":"ref21","author":"Zandesh, Z","year":"2020","journal-title":"Designing Privacy Preserving Architecture for Patient Information in Public Cloud"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1089\/tmj.2011.0103"},{"key":"ref23","unstructured":"Rodr\u00edguezASde la TorreIPascualADAn\u00e1lisis de aspectos de inter\u00e9s sobre privacidad y seguridad en la Historia Cl\u00ednica Electr\u00f3nicaDialnet20112024-01-04https:\/\/dialnet.unirioja.es\/servlet\/articulo?codigo=4204217"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/icimu.2014.7066612"},{"key":"ref25","first-page":"42","author":"Barker, K","year":"2009","journal-title":"Dataspace: The Final Frontier. BNCOD 2009. Lecture Notes in Computer Science, vol 5588"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-003-0183-z"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICRIIS.2017.8002472"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.05.002"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2011.5716518"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1108\/09685220610690835"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.2307\/4150655"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2012.11.005"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s12553-014-0093-8"},{"key":"ref34","unstructured":"ACM Computing Classification SystemAssociation for Computing Machinery2024-01-04https:\/\/dl.acm.org\/ccs"},{"key":"ref35","unstructured":"TopicsComputer Security Division \/ NIST2024-01-04https:\/\/csrc.nist.gov\/topics"},{"key":"ref36","unstructured":"2017 IEEE TaxonomyInstitute of Electrical and Electronics Engineers20172024-01-04https:\/\/radiowirelessweek.org\/wp-content\/uploads\/2020\/05\/taxonomy_v101.pdf"},{"key":"ref37","unstructured":"CybersecurityETSI2024-01-04https:\/\/www.etsi.org\/technologies\/cyber-security"},{"key":"ref38","unstructured":"International Federation for Information Processing2024-01-04https:\/\/ifip.org\/"},{"key":"ref39","unstructured":"34th International Conference on ICT Systems Security and Privacy ProtectionInternational Federation for Information Processing2024-01-04https:\/\/www.ifipsec.org\/2019\/"},{"key":"ref40","unstructured":"IT-GrundschutzFederal Office for Information Security2024-01-04https:\/\/www.bsi.bund.de\/EN\/Themen\/Unternehmen-und-Organisationen\/Standards-und-Zertifizierung\/IT-Grundschutz\/it-grundschutz_node.html"},{"key":"ref41","unstructured":"Nai FovinoINeisseRLazariARuzzanteGPolemiNFigwerMEuropean Cybersecurity Centres of Expertise Map - Definitions and TaxonomyPublications Office of the European Union20182024-01-04https:\/\/publications.jrc.ec.europa.eu\/repository\/handle\/JRC111441"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/S0272-6963(01)00063-8"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2012.26"},{"issue":"2","key":"ref44","first-page":"Article 5","volume":"19","author":"Iivari, J","year":"2007","journal-title":"Scand J Inf Syst"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.2307\/25148742"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.2307\/258704"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/BF00156457"},{"key":"ref48","unstructured":"The NIST Definition of Cloud ComputingNational Institute of Standards and Technology2024-01-04https:\/\/csrc.nist.gov\/pubs\/sp\/800\/145\/final"},{"key":"ref49","unstructured":"NIST Cloud Computing Security Reference Architecture (NIST SP 500-299)National Institute of Standards and Technology2024-01-04https:\/\/csrc.nist.gov\/pubs\/sp\/500\/299\/ipd"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.09.002"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-012-0846-y"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/isc2.2016.7580803"},{"key":"ref53","doi-asserted-by":"crossref","DOI":"10.1201\/b14321","author":"Hernandez, S","year":"2012","journal-title":"Official (ISC)2 Guide to the CISSP CBK, Third Edition"},{"key":"ref54","unstructured":"An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule (NIST SP 800-66 Rev. 1)National Institute of Standards and Technology2024-01-04https:\/\/csrc.nist.gov\/pubs\/sp\/800\/66\/r1\/final"},{"key":"ref55","unstructured":"DamanRTripathiMMishraSSecurity issues in cloud computing for healthcare20163rd International Conference on Computing for Sustainable Global DevelopmentMarch 16-18, 2016New Delhi, India"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/icitst.2016.7856697"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ares.2014.28"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1542\/peds.2010-2184"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.4103\/0974-2077.41159"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.20529\/IJME.2008.012"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/sahcn.2013.6644964"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ccgrid.2012.126"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/healthcom.2013.6720721"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.5539\/nct.v1n2p12"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2417"},{"key":"ref66","unstructured":"Health dataWikipedia2024-01-04https:\/\/en.wikipedia.org\/wiki\/Health_data"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/padsw.2014.7097878"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/1721654.1721672"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2008.12.001"},{"key":"ref70","unstructured":"mHealth: new horizons for health through mobile technologies: second global survey on eHealthWorld Health Organization2024-01-04https:\/\/iris.who.int\/handle\/10665\/44607"},{"key":"ref71","unstructured":"Data types and sources for health information exchange (HIE)HITEQ Center2024-01-04https:\/\/hiteqcenter.org\/DesktopModules\/EasyDNNNews\/DocumentDownload.ashx?portalid=0&moduleid=718&articleid=132&documentid=79"},{"key":"ref72","unstructured":"U-M data classification levelsUniversity of Michigan2024-01-04https:\/\/safecomputing.umich.edu\/protect-the-u\/safely-use-sensitive-data\/classification-levels"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1016\/j.proeng.2014.11.577"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/mcom.2002.1024422"},{"key":"ref75","unstructured":"MainettiLPatronoLVileiAEvolution of wireless sensor networks towards the Internet of Things: A survey201119th International Conference on Software, Telecommunications and Computer NetworksSeptember 15-17, 2011Split, Croatia"},{"key":"ref76","unstructured":"MehmoodWHassanATabishRTouatiFPerformance evaluation of 6LOWPAN based networks for ubiquitous health monitoring system201413th International Conference on Wireless NetworksJuly 21-24, 2014Las Vegas, NV"},{"key":"ref77","unstructured":"Ugrenovi\u0107DGarda\u0161evi\u0107GPerformance analysis of IoT wireless sensor networks for healthcare application20152nd International Conference on Electrical, Electronic and Computing EngineeringJune 8-11, 2015Silver Lake, Serbia"},{"key":"ref78","unstructured":"KushalnagarNMontenegroGSchumacherCIPv6 over low-power wireless personal area networks (6LoWPANs): overview, assumptions, problem statement, and goalsRFC Editor2024-01-04https:\/\/www.rfc-editor.org\/info\/rfc4919"},{"key":"ref79","unstructured":"RPL: IPv6 routing protocol for low-power and lossy networksIETF Datatracker2024-01-04https:\/\/datatracker.ietf.org\/doc\/html\/rfc6550"},{"key":"ref80","unstructured":"FieldingRArchitectural styles and the design of network-based software architecturesUniversity of California, Irvine20002024-01-04https:\/\/ics.uci.edu\/~fielding\/pubs\/dissertation\/top.htm"},{"key":"ref81","author":"Dishongh, T","year":"2009","journal-title":"Wireless Sensor Networks for Healthcare Applications"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/tbme.2010.2086456"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/1778765.1778814"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/2030112.2030163"},{"key":"ref85","unstructured":"HogueRTablet use within medicine2013IADIS International Conference on Mobile Learning 2013March 14-16, 2013Lisbon, Portugal"},{"issue":"5","key":"ref86","first-page":"362","volume":"34","author":"Garrison, G","year":"2002","journal-title":"Fam Med"}],"container-title":["JMIR Formative Research"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/formative.jmir.org\/2024\/1\/e38372","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T17:34:12Z","timestamp":1782840852000},"score":1,"resource":{"primary":{"URL":"https:\/\/formative.jmir.org\/2024\/1\/e38372"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,12]]},"references-count":86,"URL":"https:\/\/doi.org\/10.2196\/38372","relation":{"has-preprint":[{"id-type":"doi","id":"10.2196\/preprints.38372","asserted-by":"object"}]},"ISSN":["2561-326X"],"issn-type":[{"value":"2561-326X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,12]]}}}