Accepted for/Published in: JMIR mHealth and uHealth
Date Submitted: May 4, 2023
Date Accepted: Oct 4, 2023
Warning: This is an author submission that is not peer-reviewed or edited. Preprints - unless they show as "accepted" - should not be relied on to guide clinical practice or health-related behavior and should not be reported in news media as established information.
Balancing Public Health and Personal Information Protection: Challenges and Crossroads of Health Code Apps in China
ABSTRACT
Background:
Digital technologies, especially contact tracing apps, have been crucial in monitoring and tracing the transmission of COVID-19 worldwide, which presented challenges to personal information protection. In China, health code apps were implemented as an emergency response to the pandemic and planned for broader public health services. However, potential problems within privacy policies may compromise personal information protection under the Personal Information Protection Law (PIPL).
Objective:
Our objective is to evaluate the legal protection of personal information in the privacy policies of health code apps.
Methods:
This paper presents the first content analysis and quantitative research on privacy policies for health code apps in China, emphasizing the information processing justification and the informed consent. Using a mixed-methods approach, we reviewed regulatory documents and 28 available privacy policies.
Results:
Our findings reveal unsatisfactory compliance with PIPL, including the lack of specific purpose and sufficient necessity for processing personal information, inadequate notification and the absence of separate consent.
Conclusions:
China should develop a balanced policy addressing both public health and personal information protection while facing the crossroads regarding the future of health code apps. The specific purpose of applying health code apps in public health services and the sufficient necessity for processing personal information should be reconsidered and articulated explicitly. Meanwhile, users’ informed consent must be obtained, including comprehensive notification and separate consent.
Citation
Request queued. Please wait while the file is being generated. It may take some time.
Copyright
© The authors. All rights reserved. This is a privileged document currently under peer-review/community review (or an accepted/rejected manuscript). Authors have provided JMIR Publications with an exclusive license to publish this preprint on it's website for review and ahead-of-print citation purposes only. While the final peer-reviewed paper may be licensed under a cc-by license on publication, at this stage authors and publisher expressively prohibit redistribution of this draft paper other than for review purposes.