privacy and data protection: role of pharma companies can...nitin goel vp and gm, middle east, iqvia...

Copyright © 2017 IQVIA. All rights reserved.

Health Insight 2018 – Value in Healthcare

Nitin Goel

VP and GM, Middle East, IQVIA

Privacy and Data Protection:

Role of Pharma Companies

1Copyright © 2018 IQVIA. All rights reserved.

a Human Data Science CompanySolutions to drive healthcare forward

More Effective

Health Delivery

Pay for Value &

Outcomes

Improved

Health

2

Amount of digitized healthcare data is increasing dramatically…


3

… which enables all stakeholders to deliver improved healthcare


4

Optimized Care for Better Outcomes

Effective use of data delivers better outcomes and savings


Efficiencies - Paying for Value

5

However, value of leveraging patient data needs to be balanced with need for patient privacy


Leveraging patient

data to improve

healthcare

outcomes and

reduce medical

costs

Safeguarding

patient privacy

and ensuring

ethical use of the

data

Sustainable

model to bring

healthcare

forward

6

The approaches are not necessarily identical but the underlying idea is that when considering the utility and privacy of the data, a risk based approach is appropriate

Middle East regulatory environment is not mature yet but developed markets use a risk based approach to patient privacy


7

Combination of approaches needed to safeguard patient privacy


Data Anonymization

De-identifying (or, Anonymizing) Specific

Data Elements

• Removal or masking/disguising of Direct Patient

Identifiers

• Names, email addresses, national IDs, medical IDs,

and genomic sequence

• Generalizing Indirect Patient Identifiers

• Date of birth, treatment dates, other dates, age,

sex, race, ethnicity, postal codes, socioeconomic

data etc.

• For examples, using age-ranges and truncating

Postal-Codes (36487 to 364XX)

Data Protection

Security control to protect privacy and m

maintain de-identification

• Administrative controls

• Policies/procedures, contractual requirements (e.g.,

an obligation to not re-identify individuals, specific

privacy and security training, mandatory data

classification schemes with access restrictions

• Technical controls

• Encryption, access management, etc.

• Physical Controls

• Firewalls, badge access to facilities, etc.

8

De-identification process should take into account the re-identification risk


9

De-identification must cover both structured and unstructured data


10

IQVIA employs and offers best-in-class de-identifying platforms


EclipseMeasures risk and

de-identifies

structured datasets

LexiconDe-identifies

unstructured

datasets

Proven and trusted by customers globally

Risk-based de-identification solutions for

structured and unstructured data

De-identifies data through expert methods that

allow flexibility

Designed to help you meet GDPR requirements

and global regulations

Automated and optimized for performance and

data utility

Spark-based solution scales up & down,

handling billions of records

Thank you

Nitin Goel

VP and GM, Middle East, IQVIA

[email protected]
mailto:[email protected]

privacy and data protection: role of pharma companies can...nitin goel vp and gm, middle east, iqvia...

Documents