P RIVACY E NGINEERING : P ERSONAL H EALTH R ECORDS IN C LOUD C OMPUTING E NVIRONMENTS Research - in - Progress Alexander Kaletsch

Personal health records (PHR) enable patients to manage their health information in cloud environments. The information contained in PHRs is highly sensitive. Unintended exposure of this data threatens an intimate part of a patient’s private sphere and may lead to undesirable consequences. Cloud technologies gain in momentum but also created security issues broadly discussed in academia and practice. Due to possible inherent conflicts, the collaboration of technologies like PHRs and Clouds requires work on security and privacy issues. In our study, we aim to investigate privacy issues, which may apply when using such a cloud service. The findings are supported by a real-world scenario with concrete facts and questions. Thus, this work presents the research-in-progress by examining the theoretical foundation of PHRs in cloud environments, discussing the upcoming privacy engineering framework, and reflecting the privacy case studies performed on selected PHR systems.