Захист персональних даних в медичних застосунках та застосунках для підтримки здорового способу життя

Abstract

The article examines the main legislative acts that regulate the processing of personal data in the healthcare sector, in particular GDPR (General Data Protection Regulation), HIPAA (US Health Insurance Portability and Accountability Act) and the Ukrainian law "On the Protection of Personal Data". Particular attention is paid to the comparison of these regulatory acts and their impact on the development of medical applications that work with sensitive data. In addition, the article presents methods for assessing the cyber resilience of medical applications, in particular threat modeling, impact analysis and assessment of the likelihood of attacks. The principles of building a resilient cyberdefense system are highlighted, in particular the principle of a process approach and layered protection, which contribute to ensuring reliable protection of personal data in medical applications.