Preliminary exploration of the classification of data security in clinical research_Chinese Journal of Evidence-Based Medicine

Authors：

LI Xueying ¹ , WANG Xicheng ² ,  SHA Ruoqi ³ ,  YAO Chen ^1,4 , JIN Feifei ¹ , YAN Xiaoyan ⁴ , ZHU Sainan ¹ , SHANG Meixia ¹

1. Department of Biostatistics, Peking University First Hospital, Beijing 100034, P.R.China;
2. Beijing Dublin International College, Beijing University of Technology, Beijing 100124, P.R.China;
3. China Construction Bank Fintech, Beijing 100033, P.R.China;
4. Peking University Clinical Research Institute, Beijing 100191, P.R.China;

Corresponding?author：

SHA Ruoqi, Email: sharuoqi.zb@ccbft.com; YAO Chen, Email: yaochen@hsc.pku.edu.cn

Keywords：

Data security; Information security; Real world data; Privacy protection; Clinical research

DOI：

10.7507/1672-2531.202012111

Video：

Export PDF Favorites Scan Get Citation

Abstract Full text Figures/Tables Video References Cited by

Objective To construct a strategy for classification of clinical research data security for real-world research, based on the features of clinical research data.Methods Based on the laws, regulations, and data security classification method in relevant fields, the clinical research data was classified into five security levels. Then, the method was gradually perfected through three times of revisions, which followed the advice from experts who were experienced in many relative areas, such as clinical medicine, clinical research methodology, clinical research management, ethics, genetics and public health data application and management.Results Experts’ opinions gradually converged through several times of consultation. The clinical research data was finally classified into five security levels with explicit definition and security policy for each security level. Thirty-three data categories, which covered demographic information, clinical examination, diagnosis, treatment information, genetic information, health economics information, medical data and information on research processes that have been published, were included in the five security levels.Conclusions Since there is an increasing trend of data scale and the data security classification and management are necessary to ensure the data security and appropriately utilization of data. The method of clinical research data classification proposed in this paper can provide beneficial references for the further improvement of data security in the future.

Citation： LI Xueying, WANG Xicheng, SHA Ruoqi, YAO Chen, JIN Feifei, YAN Xiaoyan, ZHU Sainan, SHANG Meixia. Preliminary exploration of the classification of data security in clinical research. Chinese Journal of Evidence-Based Medicine, 2021, 21(5): 525-531. doi: 10.7507/1672-2531.202012111 Copy

1.	國家藥品監督管理局. 臨床試驗數據管理工作技術指南. Available from: http://www.nmpa.gov.cn/WS04/CL2138/300192.html.
2.	U. S. Food and Drug Administration. Computerized systems used in clinical investigations. Available from: https://www.fda.gov/regulatory-information/search-fda-guidance-documents/computerized-systems-used-clinical-investigations.
3.	U. S. Food and Drug Administration. Electronic source data in clinical investigations. Available from: https://www.fda.gov/regulatory-information/search-fda-guidance-documents/electronic-source-data-clinical-investigations.
4.	The International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use (ICH) Integrated Addendum to ICH E6(R1): Guideline for Good Clinical Practice (R2). Available from: https://database.ich.org/sites/default/files/E6_R2_Addendum.pdf.
5.	Abraham R, Schneider J, Brocke J. Data governance: a conceptual framework, structured review, and research agenda. Int J Inf Manage, 2019, 49: 424-438.
6.	國家市場監督管理總局, 中國國家標準化管理委員會. 信息技術服務治理第 5 部分: 數據治理規范. Available from: http://openstd.samr.gov.cn/bzgk/gb/newGbInfo?hcno=F3B2108863A2292F5AF0FA645CEE047F.
7.	International Organization for Standardization. Information technology-governance of IT-governance of data-part 1: application of ISO/IEC 38500 to the governance of data ISO/IEC 38505-1: 2017. Available from: https://www.iso.org/standard/56639.html.
8.	The Global Data Management Community. Guide to the data management body of knowledge (DAMA-DMBOK) 2009 functional framework v. 3. Available from: https://damadach.org/dama-dmbok-functional-framework/.
9.	李雪迎, 沙若琪, 姚晨, 等. 面向真實世界數據的臨床研究數據治理模式選擇. 中國循證醫學雜志, 2020, 20(10): 1150-1156.
10.	彭曉霞, 舒嘯塵, 譚婧, 等. 基于真實世界數據評價治療解決的觀察性研究設計技術規范. 中國循證醫學雜志, 2019, 19(7): 779-786.
11.	高培, 王楊, 羅劍鋒, 等. 基于真實世界數據評價治療結局研究的統計分析技術規范. 中國循證醫學雜志, 2019, 19(7): 787-793.
12.	聶曉璐, 武澤昊, 趙厚宇, 等. 使用常規收集醫療衛生數據開展觀察性研究的報告規范(藥物流行病學版)RECORD-PE 規范中文版(上). 藥物流行病學雜志, 2019, 28(3): 190-198, 212.
13.	Sherman RE, Anderson SA, Dal Pan GJ, et al. Real-world evidence-what is it and what can it tell us? N Engl J Med, 2016, 375(23): 2293-2297.
14.	孫鑫, 譚婧, 王雯, 等. 真實世界證據助推藥械評價與監管決策. 中國循證醫學雜志, 2019, 19(5): 521-526.
15.	黃亞芳, 閻小妍, 李雪迎, 等. 真實世界證據在醫療器械臨床研究中的應用. 中國循證醫學雜志, 2017, 17(12): 1373-1377.
16.	胡建平. 醫院數據治理框架、技術和實現. 北京: 人民衛生出版社, 2019.
17.	桑尼爾索雷斯, 著. 匡斌, 譯. 大數據治理. 北京: 清華大學出版社, 2014.
18.	中華人民共和國網絡安全法. Available from: http://www.npc.gov.cn/wxzl/gongbao/2017-02/20/content_2007531.htm.
19.	數據安全法草案: 落實數據安全保護責任規定支持促進措施. Available from: http://www.npc.gov.cn/npc/c30834/202006/97f149839ff04c428224f6344ead7e38.shtml.
20.	中華人民共和國人類遺傳資源管理條例. Available from: http://www.gov.cn/zhengce/content/2019-06/10/content_5398829.htm.
21.	李雪迎, 姚晨, 晉菲斐, 等. 利用醫院電子病歷數據開展臨床研究的信息安全策略. 中國食品藥品監管, 2020, (11): 48-55.
22.	國家市場監督管理總局, 中國國家標準化管理委員會. 信息安全技術健康醫療信息安全指南. Available from: http://www.gb688.cn/bzgk/gb/newGbInfo?hcno=239351905E7B62A7DF537856738247CE.
23.	計算機信息系統安全保護等級劃分準則. Available from: http://www.gb688.cn/bzgk/gb/newGbInfo?hcno=814B9ED6130F17C4B53EF6AA98BCD5A7.
24.	關于國家標準《信息安全技術健康醫療信息安全指南》征求意見稿征求意見的通知. Available from: https://www.tc260.org.cn/front/bzzqyjDetail.html?id=2018122714084535965&norm_id=20180929110009&recode_id=30639.
25.	中國信息安全測評中心. 信息安全等級保護管理辦法(試行), 2006. Available from: www.itsec.gov.cn/fgbz/xgfg/200610/t20061012_15247.html.
26.	金融數據安全數據安全分級指南. Available from: http://hbba.sacinfo.org.cn/snDetail/f387de367946d1cc02133ae8f207327c8edae8a2a213c31184f86b3481990921.
27.	CDISC. CDASH Model v1.1. Available from: https://www.cdisc.org/standards/foundational/cdash/cdash-model-v1-1.
28.	CDISC 中國協調委員會. 臨床數據獲取協調標準(CDASH). Available from: http://www.cdiscchina.org/forum.php?mod=viewthread&tid=12322&extra=page%3D1.
29.	中華人民共和國衛生健康委員會. 國家健康醫療大數據標準、安全和服務管理辦法(試行). Available from: http://www.nhc.gov.cn/guihuaxxs/s10741/201809/758ec2f510c74683b9c4ab4ffbe46557.shtml.
30.	中華人民共和國民法典. Available from: http://www.npc.gov.cn/npc/c30834/202006/75ba6483b8344591abd07917e1d25cc8.shtml.

Chinese Journal of Evidence-Based Medicine

Preliminary exploration of the classification of data security in clinical research

Abstract Full text Figures/Tables Video References Cited by

Previous Article

Next Article

Format

Content