R. Felista Sugirtha Lizy, Ir. Bambang Sugiyono Agus Purwono
The Medical Internet of Things (MIoT) has fundamentally altered the delivery of modern healthcare services through the combination of real-time data collection, remote patient monitoring, and personalized treatment options. While the technological innovation presented by the MIoT is impressive, the socio-technical implications around privacy and confidentiality of medical data will serve as a perpetual and significant challenge. This chapter considers the various types of sensitive data that are oftentimes collected and communicated as part of the MIoT, including physiological data, behavioral data, and electronic health records (EHR). The chapter explores relevant regulatory frameworks including HIPAA, the General Data Protection Regulation (GDPR), and recently emerging international standards with respect to data protection in health contexts. The chapter also considers various existing privacy risks, including unauthorized access to and usage of data, breaches of individual privacy, and unwanted profiling, that are common to all MIoT systems. A range of privacy-enhancing technologies are discussed in order to reduce or eliminate risks to patient data privacy including encryption, anonymization, differential privacy, and blockchain. Ultimately, the chapter highlights the need to a multi-tiered approach to privacy compliance that includes compliance to standards, application of appropriate technology, and ethical approaches to safeguarding trust and patient data in a rapidly changing compliant healthcare environment. © 2026 CRC Press.
Department of Computer Science, A.P.C. Mahalaxmi College for Women, Tamil Nadu, Thoothukudi, India; Mechanical Engineering Department, State Polytechnic of Malang, Indonesia