Privacy Sensitive Architecture for Psychiatric Behaviour Monitoring Service System

1. Privacy Sensitive Architecture for Psychiatric Behaviour Monitoring Service System Presenter: Rusyaizila Ramli (Ph.D student) Supervisors: Associate Professor Dr. Putra Sumari Dr. Nasriah Zakaria School of Computer Sciences Universiti Sains Malaysia, Penang, Malaysia

2. Healthcare, ICT and privacy • Privacy is a fundamental human right (UN, 1948) • Privacy has received very little attention from Information System Developer (ISD) researchers, with mainstream literature treating privacy as analogous to data security [3] • Healthcare and ICT may give impact upon the privacy of individuals • Most invasions of privacy are not intentional but due to designers inability to anticipate how this data could be used, by whom and how this might affect users [1]

3. Literature Review (Privacy Model) • Issue: literature on privacy usually concentrates on protecting certain types of data without establishing what people regard as private info. • Objective: to provide designers with a better understanding of how users will perceive data generated and the way it is used. [] Figure 1: Privacy Model Factors and Issues [1]

4. Literature Review (Conceptual Framework) • Issue: current ISD approaches are failing to recognize the significant of privacy issues that affect those involved in the development and deployment of information system. • Analysing and interpreting privacy issues in ISD Figure 2: A Privacy Framework for Information Systems Development [3]

5. Healthcare Monitoring System Overview

6. Privacy in Malaysia Context There are 2 types of psychiatric care in Malaysia: • Public Psychiatric Wards Only at public hospital can provide ward and acute care - monitor psychiatric patients • Private Mental Institutions • They do not provide ward • Most of the patients have stigma, attached to them and their believe system (due to the illness) • Their privacy level would be depend on the types of mental illness, duration, ethnic group and education background

7. An observation in a psychiatric female ward • There are 5 cameras (1 with panning) • 25 beds • Patients are not mentioned about the monitoring system, unless if they ask • After 10 days, videos will be automatically deleted • During night, patient cannot be monitored • Every 15 minutes, nurse will count the numbers of patient • HDU (???) – no monitor, based on physical observation

8. Problem Statement • There is no privacy concern from healthcare and system developer for psychiatric behavior monitoring (in Malaysia) • Even though they have mental ill, still there is a need to inform consent and patient/family needs to know how the information is being shared, where does go, who will use the information • Chose monitoring systems because psychiatric patients would have different privacy perspective concerns and would have different level of disclosure compared to other illnesses • There is little support for system developers to design and implement privacy sensitive environment that can help patients in managing their privacy [1]

9. Objectives • To understand the nature and range of privacy concerns among psychiatric patients and family with respect to pervasive healthcare behavior monitoring system • To elucidate a privacy framework of privacy in pervasive healthcare behavior monitoring system • To use the privacy framework: • To develop user’s privacy management module that provides end-users with appropriate control and feedback mechanism for managing their privacy • As a toolkit for system developer to develop privacy sensitive monitoring system that will cater patient’s privacy concerns

10. Methodology

11. References: • Adams, A., Martina, M., Sasse, A., &Sasse, M. A. (2001). Privacy in Multimedia Communications: Protecting Users, Not Just Data. • Adams, A. (1999). Users' perception of privacy in multimedia communication. Paper presented at the CHI '99 extended abstracts on Human factors in computing systems. • Carew, P., & Stapleton, L. (2005). Towards a Privacy Framework for Information Systems Development Information Systems Development (pp. 77-88). • Carew, P., Stapleton, L., & Byrne, G. (2008). Implications of an ethic of privacy for human-centred systems engineering. AI & Society, 22(3), 385-403. • Carew, P. J., & Stapleton, L. (2005). Privacy, Patients and Healthcare Workers. Paper presented at the Proceedings of the 16th IFAC World Congress, Prague. • Hong, J. (2005). An architecture for privacy-sensitive ubiquitous computing. University of California, Berkeley. • Hong, J. I., & Landay, J. A. (2004). An architecture for privacy-sensitive ubiquitous computing. Paper presented at the Proceedings of the 2nd international conference on Mobile systems, applications, and services.

12. Thank You