Privacy and security concerns for health data collected using off-the-shelf health monitoring devices

Over the last few years, there has been an increase in the adoption of consumer-level health monitoring devices. These off-the-shelf devices are being utilized to collect data anywhere from tracking users´ daily activities such as steps taken and calories burned, to monitoring of vital parameters such as heart rate and blood pressure. These devices collect a wealth of health related data which, depending on where it is processed and stored, require implementing sufficient privacy and security controls to prevent misuse or abuse of the data. This paper presents a comprehensive analysis of the privacy and security requirements based on industry best practices, laws and regulations for the collection, usage, storage and sharing of person health information.