Balancing Between Privacy and Patient Needs for Health Information in the Age of Participatory Health and Social Media: A Scoping Review

Summary

Objectives: With the increased use of participatory health enabling technologies, such as social media, balancing the need for health information with patient privacy and confidentiality has become a more complex and immediate concern. The purpose of this paper produced by the members of the IMIA Participatory Health and Social Media (PHSM) working group is to investigate patient needs for health information using participatory health enabling technologies, while balancing their needs for privacy and confidentiality.

Methods: Six domain areas including media sharing platforms, patient portals, web-based platforms, crowdsourcing websites, medical avatars, and other mobile health technologies were identified by five members of the IMIA PHSM working group as relevant to participatory health and the balance between data sharing and patient needs for privacy and confidentiality. After identifying the relevant domain areas, our scoping review began by searching several databases such as PubMed, MEDLINE, Scopus, and Google Scholar using a variety of key search terms.

Results: A total of 1,973 studies were identified, of which 68 studies met our inclusion criteria and were included in the analysis. Results showed that challenges for balancing patient needs for information and privacy and confidentiality concerns included: cross-cultural understanding, clinician and patient awareness, de-identification of data, and commercialization of patient data. Some opportunities identified were patient empowerment, connecting participatory health enabling technologies with clinical records, open data sharing agreement, and e-consent.

Conclusion: Balancing between privacy and patient needs for health information in the age of participatory health and social media offers several opportunities and challenges. More people are engaging in actively managing health through participatory health enabling technologies. Such activity often includes sharing health information and with this comes a perennial tension between balancing individual needs and the desire to uphold privacy and confidentiality. We recommend that guidelines for both patients and clinicians, in terms of their use of participatory health-enabling technologies, are developed to ensure that patient privacy and confidentiality are protected, and a maximum benefit can be realized.

Keywords

Participatory health - social media - privacy - data sharing

Introduction

Social networking sites (SNS), blogs, mi-croblogs, media sharing platforms, wikis, and virtual worlds are regarded as mobile and web-based tools, and like social media, afford users the ability to communicate, share, participate, collaborate, and create user-generated content in an interactive fashion[1] [2]. Since their utility as tools for health management was proposed[3], they have become more widely accepted for their ability to engage and empower individuals to become active participants to their own health and well-being management. This forms the very foundations of participatory health[4] [5]. Such platforms allow individuals to search for and crowdsource health information, connect with online health communities, find and communicate with health providers, share their experiences, and participate in research[1].

Recently, there has been an exponential rise in the peer-reviewed outputs related to social media use in health and healthcare[6]. Several areas and applications have featured in the health informatics research domain, commenting on potential benefits, i.e. delivery of health interventions, impact of using social media on patient-reported health outcomes (PROs) as part of health management, syndromic and disease surveillance, and the utility of these platforms for recruiting participants into research studies[1].

Whilst the collective intelligence surrounding the various uses and applications of social media and mobile technology in health is on the rise, the evidence-based research for social media's effectiveness to improve health outcomes remains relatively immature[2]. Several compelling arguments exist for why evidence needs to continue to grow, including the need to examine not only perceived positives, but also to unpack any potential negatives or unintended consequences of using social media[1] [7]. This has been a core focus of the work of the members of the International Medical Informatics Association - Participatory Health and Social Media Working Group (IMIA PHSM), many of whom are authors of this manuscript. Of primary significance to this Yearbook theme, the working group's previous work has noted that ethical issues related to social media, such as privacy and confidentiality, are key areas warranting further research[1] [7].

The very notion of participatory health through social media not only implies that individuals engage with these technologies for active self-management but also anticipates changes in the patient-provider relationship[8]. The greater access to health information and the formation of connected online communities have also been heralded as reasons that citizens are more able to approach the patient-provider relationship on a more equal footing. In doing so, the very nature of the relationship changes and shared-decision making about health ensues[3] [4] [9].

In light of social media's utility as tools for participatory health, interest surrounding the integration of such platforms as tools for communication and/or data inputs into a patient's clinical record continues to grow[1] [10] [11]. Suggested benefits of doing so may include: access to a diverse range of relevant health information, decreasing ambiguity by providing context to clinical health information, enabling personalized and tailored communication, as well as identifying novel research challenges[1] [10]. Interestingly, the idea of including patient-reported information (PRI) as a legitimate and complementary addition to more traditional clinical health indicators and patient-reported outcome (PRO) measures is not new and has been discussed as part of the evidence-based practice rhetoric[12] [13].

Perceptions about using personally-controlled electronic health records (PCEHRs) from the patient's perspective are generally positive[12] [14] [15]. However, in regard to social media's place in this discussion, challenges remain. For example, whilst there exist stringent guidelines for health practitioners about social media use in clinical healthcare, no such privacy or confidentiality legislation exists to regulate how and where an individual may distribute and post her/his own health information online[1]. Patients are concerned by the social and economic impacts of health information being misused by employers or insurance companies to discriminate against them[16]. The relative ease to post and/or access personal health information online continues to cause health organizations to revisit how they will approach integrating social media data into electronic health records (EHRs) and how social media data will thus influence the clinical management of patients[1]. Ethics, privacy, and confidentiality, all lie at the heart of this issue[1] [10] [11] [15].

Hence, the primary objective of the IMIA PHSM Working Group's Yearbook contribution is to examine the question: “What is the balance between privacy and confidentiality, and patients’ needs regarding social media communication and information in clinical participatory health?”

Methods

The authors used their knowledge and expertise of participatory health informatics and social media to define the priority areas to study. This included a brief consultation with the broader membership of the IMIA PHSM working group, which included the five authors of this work, to help identify opportunities and challenges for the balance between privacy and confidentiality of clinical and/or health information via participatory and social media platforms. In doing so, six topic areas were identified and selected for investigation: media sharing platforms, patient portals, web-based platforms, crowdsourcing websites, medical avatars, and other mobile health (mHealth) technologies. Secondly, each of the authors selected one or more priority topic areas relevant to their expertise to perform a narrative review of the literature. Each member selected keywords to search the literature using a variety of databases ([Table 1]). Searches were conducted in October and November 2017. The authors included relevant literature and summarized the literature for each of the domain areas selected.

Table 1 High-level summary of the literature review process

Topic Areas	Keywords	Databases	Unfiltered Hits	Final Results
Patient portals	“privacy”, “patient-portal”	PubMed, MEDLINE	15 returns	8 papers
Web-based platforms	“privacy”, “website”	PubMed, MEDLINE	70 returns	10 papers
mHealth	“mHealth”, “privacy”, “confidentiality”	PubMed, MEDLINE	138 returns	16 papers
Medical avatars	“medical avatar”, “healthcare”, “privacy”, “confidentiality”	PubMed, MEDLINE	49 returns	18 papers
Media sharing	“picture”, “video”, “patient”, “privacy”, “sharing”	PubMed, MEDLINE, Scopus, Google Scholar	1,143 returns	8 papers
Crowdsourcing	“crowdsourcing”, “privacy”	PubMed, MEDLINE, Scopus, Google Scholar	558 returns	8 papers
Totals			1,973 returns	68 papers

Results

A total of 1,973 abstracts were retrieved among which 68 were included in the review. The range of papers retrieved was from 8 to 18 papers for each topic. A discussion of the results for each of the six topics is provided below. The summary of the search process and final number of papers included for each topic is provided in [Table 1].

1 Patient Portals

The sharing of personal health information (PHI) via patient portals and linked personal health records has been an area of significant interest for providers and patients alike. In some places, governments mandate that individuals be able to securely access their medical information online. Although privacy within patient portals is by no means the main concern of many patients, it is one of the two most pressing issues for older users[17]. A number of issues emerged with regard to the storage and use of PHI in portals, including inappropriate PHI access and use by pharmaceutical companies, access to health records by insurance companies and governments without patients’ permission, and the fear that health record information could be used to evict individuals from independent living environments[17]. Among low-education and low-income patients, the fear that passwords will provide inadequate protection and that PHI could be stolen is a significant concern[14]. People who access the Internet through venues such as public libraries are concerned about others seeing their PHI, particularly when they have conditions that may result in discrimination, such as HIV infection[18].

Even if patients express concerns about privacy and confidentiality when accessing information through patient portals, they remain open to using portals[19]. Despite limited resources, patients who received care at a urban safety-net clinic have reported regular use of the Internet and email, and have expressed interest in using a portal to manage their PHI and engage with providers[20]. Training about safe portal use would likely assuage privacy concerns, particularly in low-income and/or low-literacy populations. Having a way to find out who has accessed their medical record would make patient portals more attractive to patients of vulnerable groups[18]. A patient portal task force involving 71 members from 10 academic medical centers recently noted that innovative approaches to protect privacy and security while optimizing portal access, e.g., health record banking, should be evaluated[21].

Despite concerns about privacy and security of data made accessible through patient portals, some factors do help patients overcome privacy concerns[22]. The ability to access and control PHI contained in portals and to check records for errors leads to feelings of empowerment and confidence, which can improve patients’ ability to manage their health. Patients also perceive that portals facilitate improved communication with their providers and they are more likely to use portals when providers encourage them to do so. In settings in which patients and caregivers have not perceived privacy to be an issue, such as in an inpatient rehabilitation hospital, patients and caregivers have reported finding value in patient portal use, indicating that efforts to overcome privacy and security concerns are merited[23].

2 Web-based Platforms

Privacy has been a primary concern for users of all types of information displayed or distributed via the Internet. Privacy concerns are particularly relevant as patients provide PHI or access their treatment via the Internet. Users of health-related Web sites and Web-based platforms have expressed concerns about the privacy of personal data transmitted or accessed via the Web, and the use of the Internet as a platform for interventions (e.g. mental health consultations) raises ethical as well as privacy questions[24]. Although users of mental health services have expressed a preference for face-to-face interventions[25], acceptance of online engagement is evident and suggests improvements of online mental health services (e.g., brief modules, personalized content) may increase use. Users’ perceptions about PHI privacy within Web-based behavior modification programs are mixed; privacy concerns did reduce participation in an alcohol-reduction program[26], but not in an interactive sexual risk reduction program targeted to teens[27].

Recruitment of individuals for clinical trials via the Internet is another area in which privacy is of paramount interest, because determining eligibility for trials requires PHI. While developing a model for recruiting cancer patients and family caregivers, investigators noted that even the use of privacy-protecting measures in social media recruitment messages directing users to a hospital blog could not guarantee that PHI would remain private[28].

In addition to the general concern about privacy, application trials offer additional insight. During the testing of a Website for heart failure symptom monitoring that was to be embedded into a patient portal, participants expressed concerns about what would be done with the data[29]. In a trial in which participants used a Web-based nutrition management program with the goal of preventing metabolic syndrome, users reported satisfaction with the privacy-preserving features of the tool, which included user authentication and SSL (Secure Sockets Layer) encryption[30].

Technology-based approaches offer some potential for ensuring that Web users’ PHI is protected during Web-based activities. An approach that limits the ability of Web applications running in separate browser windows during the same Internet session to share user information (timing-based probing attacks) has demonstrated that such privacy violations can be reduced on interactive Alexa sites[31]. Software that generates random identifiers that conceal individuals’ true identities is another technical method reported to protect privacy in epidemiologic and clinical studies[32]. The Data Sphere Project, a data sharing platform launched to accelerate cancer research by making data from Phase III clinical trials available to a broad range of investigators, de-identifies patient-related data prior to making it available to project researchers to promote patient acceptance and confidence[33].

3 Mobile Health (mHealth)

The adoption of smartphones in healthcare is increasing[34], as health professionals, patients, and the public are often using third-party applications (apps) ranging from medical references, to gaming applications, or to alternative add-ons to medical devices[35]. However, mHealth's growth has outpaced governmental regulations regarding apps. Privacy and security of user health data have been raised as a concern, along with regulation regarding access to user interaction data with installed apps. It is usual that apps and services are downloaded, distributed, and provided for free to individual users, but privacy is not always assured[36]. Smart services care for the collection of information about the individual use of apps, which can then be exploited for targeted marketing or syndicated product development[37]. Less experienced and first-time users are more prone to privacy breaches, as high usability can be accompanied by security risk of mobile systems. Thus, naive users can be misled to other apps containing malware or offering medical information of uncertain quality[38] and may, with increasing frequency, present to a clinic “armed with the questionable medical opinion of their digital iDoctor in hand”[39].

A more serious concern is the non-compliance of medical apps with standards and regulations, such as the Health Insurance Portability and Accountability Act[40]. Adherence to medical devices/software certification and conformance with safety, security, and privacy issues should become standardized criteria for review of medical apps[41]. A recent study revealed that only a small minority (30.5%) of the used apps had privacy policies[42]. Losses of individuals’ data due to hacking is costly even when quantified-self apps are considered[43], and developers must ensure their applications’ security is well-tested before released so as to minimize risks of vulnerabilities such as data storage, encryption, and authentication processes[44]. These problems are sometimes linked to K-anonymity, which is one of the identity challenges resulting from the use of information from an anonymous user to identify his/her personal identity without consent. An example of this situation occurs when someone's preferences (such as pictures, searches, or shopping habits) are used to obtain his/her identity, which may in turn be lost or stolen[45]. Such situations call for advanced encryption, such as efficient homomorphic encryption techniques.

Finally, external factors such as cultural, human, or country differences have been so far underresearched, but may also threaten privacy[44]. Human factors such as age, personality, literacy level, and cognitive ability perplexed with other cultural or societal norms may also threaten security. It is equally important that biomedical and behavioral researchers as well as institutional review boards suitably tackle the nuanced ethical issues raised by mHealth, such as anonymiza-tion, behavioral privacy, continuous and unintended sensing, and multiplexed sensor semantics[34] [45] and contribute in developing those effective mechanisms to secure mHealth technology and protect users’ personal health information.

4 Media Sharing Platforms

Media sharing of pictures and videos related to personal health or medical procedures is common on sites such as Instagram, Pinter-est, and YouTube[48] [49]. The implications on individuals’ privacy and confidentiality of potentially sensitive health information held in visual media depend on who is sharing, for what purpose, the intended and actual audience, and the platform media sharing being used.

Individuals sharing media on social media platforms to seek a diagnosis, management advice, or support, have implicitly consented for these to be in the public domain. However, even when so-called ePatients continue to produce video content about personal health experiences to help others and support self-management, loss of privacy remains a concern[50]. Furthermore, visual media shared with one audience can be captured, manipulated, and shared with a different and potentially wider audience; individuals may feel this visibility is an invasion of their privacy.

Serious implications for privacy and confidentiality of health information of individuals may arise when health professionals, organizations, or third parties share images using social media. Tolerance of risk to privacy is likely to differ depending on the purpose of media posting and the consent obtained. The General Medical Council defines visual media posted on a website or social media as tertiary use, which requires special consideration of capacity to consent, specific consent, and the consideration of relevant legislation[51]. In addition to position statements from regulators, many practical guidelines have been published for health care professionals about how to post images on social media while maintaining patient confidentiality and reducing risk of privacy breaches[49] [52] [53] [54]. While removing identifying content of images is included in these guidelines and is intuitive to most health professionals, removal of metadata from images is not always considered and poses significant risk of privacy breaches[52]. Furthermore, even highly esteemed medical journals can inadvertently share images with identifying details, which then have a wider reach due to reposting in social media[52]. Patients are likely to accept wide distribution of images for education of other health practitioners (e.g., under the hashtag of #FOAMed or “Free Open Access Medical education”)[55], as long as consent is obtained. Health professionals do, however, need to disclose the current terms of service of social media providers in order to truly inform patients when obtaining consent[49].

Some healthcare providers may post images or video on social media for promotion of services or fundraising, purposes for which tolerance for breaches of privacy are likely to be lower. Plastic surgeons are known to post extensively on social media such as Instagram and Snapchat live broadcasts of procedures where the line between education and marketing of services is blurred, which poses particular difficulties for obtain informed consent[49]. Another example is social media postings by Helicopter Emergency Medical Services (HEMS) in the United Kingdom in the purpose of public awareness to generate donations. HEMS have posted images and maps of incidents across multiple social media sites which, with cross referencing, often provided detailed information about the patient, location, and treatment, that would breach expected standards for patient privacy[54]. This is of particular concern as patients in emergency situations are unlikely to be able to provide consent in this context. Healthcare providers, professional organizations, and regulators will need to continue to develop guidelines for the use of images and videos in social media that balance professional needs for education and promotion with protection of privacy and confidentiality, with the balance of power remaining with patients.

5 Crowdsourcing

Crowdsourcing is the practice of obtaining information, services, or resources from a large group of people to generate ideas or complete a task or a project, typically via the internet. In the health domain, crowdsourcing has been used by online patient communities to access lay-expertise or generate patient-led research[56], by individuals to obtain possible diagnoses for unexplained illness[57], as a research methodology[58], particularly for genomic data[59], for knowledge management or problem ideation in public health[60], and even to fund healthcare[61]. Crowdsourcing as an approach falls between the traditional top-down hierarchical medical care or research and the bottom-up grassroot processes of patient groups as a shared top-down and bottom-up approach where the locus of data control and data use lies between organizations and the online community[60]. For this reason, crowdsourcing in all health situations requires a high-trust environment[59]. Organizations or crowds are expected to respect personal data that individuals offer to a data repository, often for altruistic reasons or for personal gain, while individuals offering data must be aware that their data could be used for other purposes which may impact them in a negative manner[59] [62].

For example, the Personal Genome Project (PGP) is a large, international, genomic, and biobanking project which aims to sequence the genomes of 100,000 volunteers and make their genetic, health, and trait information available in a public repository for research[63]. Although data are de-identified, data sets may be associated back with a participant's name, so-called re-identification, thus creating the risk of discrimination in employment insurance or for social stigma. This potential for breach of privacy is clearly explained in the consent process for the PGP. Participants in the PGP have expressed strong altruistic or personal motivations for participating; while the risks of re-identification are worrying, they would not prevent participation[62].

Online patient communities enable individuals to crowdsource ideas for diagnosis, self-management, and treatment from lay experts and health professionals, members of the communities - in accordance with professional ethics -, or lay-crowdsourced expertise[56]. In these settings, individuals are offering their personal experience in as much detail as they wish, and they thus have control over the disclosure of personal health information or any identifying details. Theoretically, there is no privacy risk in this setting since participation indicates the information is not private. Many social media platforms have the ability for users to restrict access to content posted. For example, “closed” or even “secret” Facebook groups with administrators controlling access are extensively used for crowdsourcing health information and advice from lay-peers while maintaining some privacy.

6 Medical Avatars

In computing, an avatar is “the graphical representation of the user or the user's alter ego or character”[64] or “a digital computerized stand-in for a live person or scripted character”[65]. This can be either a three-dimensional form representation, often in games or virtual worlds, or a two-dimensional form used in Web 2.0-like forums or online communities[66].

Recently, avatars may also have the form of an Intelligent Virtual Agent[67], a Virtual Care Assistant, an Embodied Conversational Agent[68], or a Bot Assistant[69], that can assist health care providers to better manage patients, boost engagement, improve treatment adherence rates and reduce costs, or promote and support self-management.

There is already literature regarding the rights a person ought to expect to retain when being represented by an avatar[70], like informed consent in virtual worlds, as well as avatar bodily integrity. It has been argued that, as another manifestation of the individual, an avatar should also have rights similar to those of a biological creature; in fact, it is argued that avatars must have rights by proxy of the rights of their users. A study conducted in Second Life on post-traumatic stress disorder and traumatic brain injury[71] discusses the rights of an individual's avatar and the analysis of issues relating to the authentication of both providers and patients alongside the latter's informed consent. The study also links the concepts of patient confidentiality and well-being with those of clinician competence and training of providers.

Systems taking advantage of 3D virtual world avatars and visualization have potential benefits in healthcare services provided for older adults[72]. In pilot studies, where embodied conversational agents in the form of an avatar (termed “digital pet”) were used to enhance older adults’ social interaction, it was shown that despite participants’ enjoying the companionship, entertainment, reminders, and instant assistance from the avatar, privacy and dependence were two of the major concerns reported by the participants[68]. This is why Reamer[73] has suggested following standards from the National Association of Social Workers Code of Ethics in an effort to guide future practice.

Contemporary avatar-assisted therapy in substance abuse treatment and remotely set group counseling sessions was shown as potentially appealing to clients who are concerned about anonymity and coniden-tiality[74]. Furthermore, a recent trial has shown that it is feasible to use Embodied Conversational Agent technology to improve education on lifestyle and physical activity, healthy eating, and stress management for diverse, urban women, without being practically restricted by any ethical considerations[75].

Moreover, medical practitioners could well overcome the aforementioned notions and use systems incorporating avatar-mediated training. For example, delivering bad news to patients or their relatives[76] including the palliative care setting in which avatars may be considered as effective and viable educational approaches. Certainly, future research could focus on expanding the discussion on the ethical considerations. Privacy and confidentiality are admittedly raised when applying virtual creatures to healthcare practice and training. Thus, immediate priority should be given to outline those elements of informed consent which are deemed necessary in virtual world scenarios. Likewise, technology should provide tools for encryption, transparent informed consenting, and means to adhere to user preferences and rights in a more comprehensive way. When avatar systems are eventually used in clinical practice, their creators should consider and follow medical software certification processes.

Discussion

A number of challenges for the balance between privacy and confidentiality of health information and patient needs via participatory platforms have been identified and explored in this paper. One of the primary concerns concerns privacy of patients sharing their health information online. For example, it is difficult to ensure that health information shared online by patients can be de-identified. Also, media sharing platforms have different privacy terms and conditions and most users are unaware of how media sharing platforms are using health information collected and for what purposes, especially among vulnerable populations. Another point of note is that there is a risk of sensitive information being leaked online. Other concerns may relate to differences in cross-cultural understanding of healthcare privacy and its impacts on patient empowerment; clinician awareness and understanding of how to use social media platforms; and the threat of commercialization of patient clinical data. Other challenges identified in this paper, include:

• Inappropriate PHI access and use;

• Privacy of personal data transmitted or accessed via the Web;

• Non-compliance of medical apps and web-based platforms with standards and regulations that could result in breaches to privacy and confidentiality for patient users and confidentiality when healthcare professionals, healthcare organizations, or other third parties share patient information and images without their consent.

Furthermore, there are few legal frameworks that protect patient confidentiality and privacy on the Internet. The issue becomes more complicated when patients are sharing their own health information online without realizing the impact it may have on their privacy, especially when patients unknowingly share their health information with unscrupulous individuals through online platforms. Even if legal frameworks were introduced, they cannot provide universal protection of patient confidentiality and privacy in the age of the Internet. We believe that increasing patient awareness about the harms of sharing personal health information online is needed and that patients should deal with credible participatory health and social media that protect patient privacy and confidentiality. Examples of such platforms are those certified by Health On the Net.

This situation reminds us of the circus, and especially, the balancing act of walking the tightrope. In this stunt, the fearless clown walks on a tensioned wire that is suspended in the air using a long pole to balance him/herself while getting from one side to the other, astonishing the crowd in the process of performing the act. Depending on how experienced the clown is, the clown may fall to his demise or injury or get to the other side unscathed. Similarly, the patient is walking the tightrope trying to balance his/her need for privacy and confidentiality with the goal of obtaining the health information needed to get well or live well. The empowered patient can get across the tightrope and get the information needed without jeopardizing privacy and confidentiality. However, the untrained patient may share sensitive health information online via public platforms (e.g., Facebook or Twitter), thereby jeopardizing personal privacy and confidentiality. These unaware patients are most in need of help and support from healthcare and participatory health and social media communities.

On the other hand, there are also several opportunities for balancing between privacy and confidentiality of health information via participatory and social media platforms. These focus on opportunities for empowering patients and enhancing their experiences by connecting social media data with clinical records which can be used for comparison and improved clinical-patient communication. As mHealth tools are becoming more credible and more useful, patients are becoming more educated about privacy and confidentiality of clinical and health information being shared online. There is also a need for open data sharing of information where patient use of mHealth, serious gaming, and other participatory healthcare platforms will be further enhanced with e-consent, thereby allowing for easier sharing of patient health information through participatory health and social media platforms.

Limitations

The range of platforms examined in this paper represent only a subset of the full range of social media and participatory health enabling technologies considered under the topic's umbrella. Furthermore, the choice to examine this selection was aligned with the expertise areas of the authors. Hence, the findings and considerations discussed in this manuscript are not necessarily representative of the full landscape of privacy and confidentiality in participatory health informatics. The goal has been to provide a succinct overview of the topic and research landscape, and provide directions for future research using robust and detailed methods.

Conclusion

As participatory health enabling technologies continue to evolve, the need to balance privacy, confidentiality, and patient needs for health information is a challenge. This is true for all stakeholders: patients, health professionals, researchers, policy makers, and healthcare organizations. There is much work that needs to be done in introducing regulations monitoring how participatory healthcare can handle patient information to ensure that patient confidentiality and privacy are protected, particularly, as we consider the increased push to consider social media data along with clinical records. We recommend future research in this area.

Acknowledgements

The authors of the present manuscript would like to duly thank their colleagues of the IMIA PHSM working group who helped shape the key considerations discussed in opportunities and challenges. This knowledge expertise provided by leaders in the field of participatory health informatics and social media is invaluable to shape state-of-the-art research and future research endeavors.

• References

• 1 Denecke K. Ethical aspects of using medical social media in healthcare applications. Stud Health Technol Inform 2014; May 23; 198: 55-62
• 2 Gibbons MC. Personal health and consumer informatics. The impact of health oriented social media applications on health outcomes. Yearb Med Inform 2013; 8: 159-61 . europepmc.org [Internet]. 2013; Available from: http://europepmc.org/ab-stract/med/23974564
• 3 Eysenbach G. Medicine 2.0: social networking, collaboration, participation, apomediation, and openness. J Med Internet Res 2008; Aug 25; 10 (03) e22
• 4 deBronkart D. From patient centred to people powered: autonomy on the rise. BMJ 2015; Feb 10; 350: h148
• 5 Swan M. Health 2050: The Realization of Personalized Medicine through Crowdsourcing, the Quantified Self, and the Participatory Biocitizen. J Pers Med 2012; Sep 12; 2 (03) 93-118
• 6 Grajales 3rd FJ, Sheps S, Ho K, Novak-Lauscher H, Eysenbach G. Social media: a review and tutorial of applications in medicine and health care. J Med Internet Res 2014; Feb 11; 16 (02) e13
• 7 Hors-Fraile S, Atique S, Mayer MA, Denecke K, Merolli M, Househ M. The Unintended Consequences of Social Media in Healthcare: New Problems and New Solutions. Yearb Med Inform 2016; Nov 10; (01) 47-52
• 8 Miron-Shatz T, Hansen MM, Grajales 3rd FJ, Martin-Sanchez F, Bamidis PD. Social Media for the Promotion of Holistic Self-Participatory Care: An Evidence Based Approach. Contribution of the IMIA Social Media Working Group. Yearb Med Inform 2013; 8: 162-8
• 9 Kaye J, Curren L, Anderson N, Edwards K, Fullerton SM, Kanellopoulou N. , et al. From patients to partners: participant-centric initiatives in biomedical research. Nat Rev Genet 2012; Apr 3; 13 (05) 371-6
• 10 Shachak A, Jadad AR. Electronic health records in the age of social networks and global telecommunications. JAMA 2010; Feb 3; 303 (05) 452-3
• 11 Murdoch TB, Detsky AS. The inevitable application of big data to health care. JAMA 2013; Apr 3; 309 (13) 1351-2
• 12 Bloomrosen M, Detmer DE. Informatics, evidence-based care, and research; implications for national policy: a report of an American Medical Informatics Association health policy conference. J Am Med Inform Assoc 2010; Mar; 17 (02) 115-23
• 13 Baldwin M, Spong A, Doward L, Gnanasakthy A. Patient-reported outcomes, patient-reported information: from randomized controlled trials to the social web and beyond. Patient 2011; 4 (01) 11-7
• 14 Zarcadoolas C, Vaughon WL, Czaja SJ, Levy J, Rockoff ML. Consumers’ perceptions of patient-accessible electronic medical records. J Med Internet Res 2013; Aug 26; 15 (08) e168
• 15 Beard L, Schein R, Morra D, Wilson K, Keelan J. The challenges in making electronic health records accessible to patients. J Am Med Inform Assoc 2012; Jan; 19 (01) 116-20
• 16 Bansal G, Zahedi FM, Gefen D. The impact of personal dispositions on information sensitivity, privacy concern and trust in disclosing health information online. Decis Support Syst 2010; May 1; 49 (02) 138-50
• 17 Sakaguchi-Tang DK, Bosold AL, Choi YK, Turner AM. Patient Portal Use and Experience Among Older Adults: Systematic Review. JMIR Med Inform 2017; Oct 16; 5 (04) e38
• 18 Dhanireddy S, Walker J, Reisch L, Oster N, Delbanco T, Elmore JG. The urban underserved: attitudes towards gaining full access to electronic medical records. Health Expect 2014; Oct; 17 (05) 724-32
• 19 Tieu L, Sarkar U, Schillinger D, Ralston JD, Ratanawongsa N, Pasick R. , et al. Barriers and Facilitators to Online Portal Use Among Patients and Caregivers in a Safety Net Health Care System: A Qualitative Study. J Med Internet Res 2015; Dec 3; 17 (12) e275
• 20 Schickedanz A, Huang D, Lopez A, Cheung E, Lyles CR, Bodenheimer T. , et al. Access, interest, and attitudes toward electronic communication for health care among patients in the medical safety net. J Gen Intern Med 2013; Jul; 28 (07) 914-20
• 21 Collins S, Dykes P, Bates DW, Couture B, Rozenblum R, Prey J. , et al. An informatics research agenda to support patient and family empowerment and engagement in care and recovery during and after hospitalization. J Am Med Inform Assoc [Internet]. 2017 Jun 17; Available from: http://dx.doi.org/10.1093/jamia/ocx054
• 22 Patient-Perceived Facilitators of and Barriers to Electronic Portal Use: A Systematic Review. Comput Inform Nurs 2017; Nov; 35 (11) 606-7
• 23 King G, Maxwell J, Karmali A, Hagens S, Pinto M, Williams L. , et al. Connecting Families to Their Health Record and Care Team: The Use, Utility, and Impact of a Client/Family Health Portal at a Children's Rehabilitation Hospital. J Med Internet Res 2017; Apr 6; 19 (04) e97
• 24 Cosgrove V, Gliddon E, Berk L, Grimm D, Lauder S, Dodd S. , et al. Online ethics: where will the interface of mental health and the internet lead us?. Int J Bipolar Disord 2017; Dec; 5 (01) 26
• 25 Batterham PJ, Calear AL. Preferences for Internet-Based Mental Health Interventions in an Adult Online Sample: Findings From an Online Community Survey. JMIR Ment Health 2017; Jun 30; 4 (02) e26
• 26 Lygidakis C, Wallace P, Tersar C, Marcatto F, Ferrante D, Della Vedova R. , et al. Download Your Doctor: Implementation of a Digitally Mediated Personal Physician Presence to Enhance Patient Engagement With a Health-Promoting Internet Application. JMIR Res Protoc 2016; Mar 4; 5 (01) e36
• 27 Brady SS, Sieving RE, Terveen LG, Rosser BRS, Kodet AJ, Rothberg VD. An Interactive Website to Reduce Sexual Risk Behavior: Process Evaluation of TeensTalkHealth. JMIR Res Protoc 2015; Sep 2; 4 (03) e106
• 28 Bender JL, Cyr AB, Arbuckle L, Ferris LE. Ethics and Privacy Implications of Using the Internet and Social Media to Recruit Participants for Health Research: A Privacy-by-Design Framework for Online Recruitment. J Med Internet Res 2017; Apr 6; 19 (04) e104
• 29 Wakefield BJ, Alexander G, Dohrmann M, Richardson J. Design and Evaluation of a Web-Based Symptom Monitoring Tool for Heart Failure. Comput Inform Nurs 2017; May; 35 (05) 248-54
• 30 Choi Y, Lee MJ, Kang HC, Lee MS, Yoon S. Development and application of a web-based nutritional management program to improve dietary behaviors for the prevention ofmetabolic syndrome. Comput Inform Nurs 2014; May; 32 (05) 232-41
• 31 Mao J, Chen Y, Shi F, Jia Y, Liang Z. Toward Exposing Timing-Based Probing Attacks in Web Applications. Sensors [Internet] 2017 Feb 25;17(03). Available from: http://dx.doi.org/10.3390/s17030464
• 32 Olden M, Holle R, Heid IM, Stark K. IDGenerator: unique identifier generator for epidemiologic or clinical studies. BMC Med Res Methodol 2016; Sep 15; 16: 120
• 33 Green AK, Reeder-Hayes KE, Corty RW, Basch E, Milowsky MI, Dusetzina SB. , et al. The project data sphere initiative: accelerating cancer research by sharing data. Oncologist 2015; May; 20 (05) 464-e20
• 34 Price M, Yuen EK, Goetter EM, Herbert JD, Forman EM, Acierno R. , et al. mHealth: a mechanism to deliver more accessible, more effective mental health care. Clin Psychol Psychother 2014; Sep; 21 (05) 427-36
• 35 Nebeker C, Murray K, Holub C, Haughton J, Arredondo EM. Acceptance of Mobile Health in Communities Underrepresented in Biomedical Research: Barriers and Ethical Considerations for Scientists. JMIR Mhealth Uhealth 2017; Jun 28; 5 (06) e87
• 36 Martínez-Pérez B, de la Torre-Díez I, López-Coro-nado M. Privacy and security in mobile health apps: a review and recommendations. J Med Syst 2015; Jan; 39 (01) 181
• 37 Hussain M, Al-Haiqi A, Zaidan AA, Zaidan BB, Kiah MLM, Anuar NB. , et al. The landscape of research on smartphone medical apps: Coherent taxonomy, motivations, open challenges and recommendations. Comput Methods Programs Biomed 2015; Dec; 122 (03) 393-408
• 38 Boulos MNK, Brewer AC, Karimkhani C, Buller DB, Dellavalle RP. Mobile medical and health apps: state of the art, concerns, regulatory control and certification. Online J Public Health Inform 2014; Feb 5; 5 (03) 229
• 39 Hogan NM, Kerin MJ. Smart phone apps: smart patients, steer clear. Patient Educ Couns 2012; Nov; 89 (02) 360-1
• 40 Elias BL, Fogger SA, McGuinness TM, D' Alessandro KR. Mobile apps for psychiatric nurses. J Psychosoc Nurs Ment Health Serv 2014; Apr; 52 (04) 42-7
• 41 Grundy QH, Wang Z, Bero LA. Challenges in Assessing Mobile Health App Quality: A Systematic Review of Prevalent and Innovative Methods. Am J Prev Med 2016; Dec; 51 (06) 1051-9
• 42 Sunyaev A, Dehling T, Taylor PL, Mandl KD. Availability and quality of mobile health app privacy policies. J Am Med Inform Assoc 2015; Apr; 22 (e1): e28-33
• 43 Kao C-K, Liebovitz DM. Consumer Mobile Health Apps: Current State, Barriers, and Future Directions. PM R 2017; May; 9 (5S): S106-15
• 44 Morera EP, de la Torre Díez I, Garcia-Zapirain B, López-Coronado M, Arambarri J. Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide. J Med Syst 2016; Jun; 40 (06) 152
• 45 Katusiime J, Pinkwart N. A review of privacy and usability issues in mobile health systems: Role of external factors. Health Informatics J 2017 Oct 1;1460458217733121
• 46 Aranda-Jan CB, Mohutsiwa-Dibe N, Loukanova S. Systematic review on what works, what does not work and why of implementation of mobile health (mHealth) projects in Africa. BMC Public Health 2014; Feb 21; 14 (01) 188
• 47 Kotz D, Gunter CA, Kumar S. Weiner JP Privacy and Security in Mobile Health: A Research Agenda. Computer 2016; Jun; 49 (06) 22-30
• 48 Madathil KC, Rivera-Rodriguez AJ, Greenstein JS, Gramopadhye AK. Healthcare information on YouTube: A systematic review. Health Informatics J 2014; Mar 25; 21 (03) 173-94
• 49 Dorfman RG, Vaca EE, Fine NA, Schierle CF. The Ethics of Sharing Plastic Surgery Videos on Social Media. Plast Reconstr Surg 2017; Oct 1; 140 (04) 825-36
• 50 Gómez-Zúñiga B, Fernandez-Luque L, Pousada M, Hernández-Encuentra E, Armayones M. ePa-tients on YouTube: Analysis of Four Experiences From the Patients’ Perspective. Med 20 2012; Jan 1; 1 (01) e1-7
• 51 Making and using visual and audio recordings of patients. 2009 Jul 22 [cited 2017 Nov 12]; Available from: https://www.gmc-uk.org/guidance/ ethical_guidance/making_audiovisual.asp
• 52 Crane GM, Gardner JM. Pathology Image-Sharing on Social Media: Recommendations for Protecting Privacy While Motivating Education. AMA J Ethics 2016; Aug 1; 18 (08) 817-25
• 53 Ranschaert ER, Ooijen PMA, Lee S, Ratib O, Parizel PM. Social media for radiologists: an introduction. Insights Imaging 2015; Nov 19; 1-12
• 54 Steele S, Adcock C, Steel A. Ethical, legal and professional issues arising from social media coverage by UK Helicopter Emergency Medical Services. Emerg Med J 2015; Dec 23; 33 (01) 57-60
• 55 Cadogan M, Thoma B, Chan TM, Lin M. Free Open Access Meducation (FOAM): the rise of emergency medicine and critical care blogs and podcasts (2002-2013). Emerg Med J 2014; Oct 1; 31 (e1): e76-7
• 56 Lamas E, Salinas R, Coquedano C, Simon M-P, Bousquet C, Ferrer M. , et al. The Meaning of Patient Empowerment in the Digital Age: The Role of Online Patient-Communities. Stud Health Technol Inform 2017; 244: 43-7
• 57 Meyer AND, Longhurst CA, Singh H. Crowd-sourcing Diagnosis for Patients With Undiagnosed Illnesses: An Evaluation of CrowdMed. J Med Internet Res 2016; Jan 14; 18 (01) e12
• 58 Ranard BL, Ha YP, Meisel ZF, Asch DA, Hill SS, Becker LB. , et al. Crowdsourcing-harnessing the masses to advance health and medicine, a systematic review. J Gen Intern Med 2014; Jan; 29 (01) 187-203
• 59 Aungst H, Fishman JR, McGowan ML. Participatory Genomic Research: Ethical Issues from the Bottom Up to the Top Down. Annu Rev Genomics Hum Genet 2017; Aug 31; 18: 357-67
• 60 Brabham DC, Ribisl KM, Kirchner TR, Bernhardt JM. Crowdsourcing applications for public health. Am J Prev Med 2014; Feb; 46 (02) 179-87
• 61 Young MJ, Scheinberg E. The Rise of Crowdfund-ing for Medical Care: Promises and Perils. JAMA 2017; Apr 25; 317 (16) 1623-4
• 62 Zarate OA, Brody JG, Brown P, Ramirez-Andreotta MD, Perovich L, Matz J. Balancing Benefits and Risks of Immortal Data. Hastings Cent Rep 2016; Jan 1; 46 (01) 36-45
• 63 Personal Genome Projects: Global Network [Internet]. . [cited 2017 Nov 12]. Available from: http://www.personalgenomes.org/
• 64 Wikipedia contributors. . Avatar (computing) [Internet]. Wikipedia, The Free Encyclopedia. 2017 [cited 2017 Nov 16]. Available from: https://en.wikipedia.org/w/index.php?title=Avatar_(com-puting)&oldid=810176189
• 65 Wang VCX. Handbook ofResearch on E-Learning Applications for Career and Technical Education: Technologies for Vocational Training: Technologies for Vocational Training. IGI Global; 2009: 1028 p
• 66 Lawrence L. Code and other Laws of Cyberspace; 1999
• 67 Intelligent Virtual Agents | SpringerLink [Internet] [cited 2017 Nov 16]. Available from: http://link.springer.com/content/pdf/10.1007/978-3-642-40415-3.pdf
• 68 Chi N-C, Sparks O, Lin S-Y, Lazar A, Thompson HJ, Demiris G. Pilot testing a digital pet avatar for older adults. Geriatr Nurs [Internet] 2017 May 4; Available from: http://dx.doi.org/10.1016/j.gerinurse.2017.04.002
• 69 Meropi P, Billis AS, Hasanagas ND, Bratsas C, Antoniou I, Bamidis PD. Conditional Entropy Based Retrieval Model in Patient-Carer Conversational Cases. In: 2017 IEEE 30th International Symposium on Computer-Based Medical Systems (CBMS). 2017 p. 576-81
• 70 Graber MA, Graber AD. Get your paws off of my pixels: personal identity and avatars as self. J Med Internet Res 2010; Jul 13; 12 (03) e28
• 71 Yellowlees PM, Holloway KM, Parish MB. Therapy in virtual environments-clinical and ethical issues.. Telemed J E Health 2012; Sep; 18 (07) 558-64
• 72 Pouke M, Hakkila J. Elderly healthcare monitoring using an avatar-based 3D virtual environment. Int J Environ Res Public Health 2013; Dec 17; 10 (12) 7283-98
• 73 Reamer - Social work FG, 2013. Social work in a digital age: Ethical and risk management challenges. academic.oup.com [Internet]. 2013; Available from: https://academic.oup.com/sw/article-abstract/58/2/163/1940392
• 74 Gordon MS, Carswell SB, Schadegg M, Mangen K, Merkel K, Tangires S. , et al. Avatar-assisted therapy: a proof-of-concept pilot study of a novel technology-based intervention to treat substance use disorders. Am J Drug Alcohol Abuse 2017; Sep; 43 (05) 518-24
• 75 Gardiner PM, McCue KD, Negash LM, Cheng T, White LF, Yinusa-Nyahkoon L. , et al. Engaging women with an embodied conversational agent to deliver mindfulness and lifestyle recommendations: A feasibility randomized control trial. Patient Educ Couns 2017; Sep; 100 (09) 1720-9
• 76 Andrade AD, Bagri A, Zaw K, Roos BA, Ruiz JG. Avatar-mediated training in the delivery of bad news in a virtual world. J Palliat Med 2010; Dec; 13 (12) 1415-9