| [1] |
中华人民共和国国家质量监督检验检疫总局, 中国国家标准化管理委员会. 信息安全技术健康医疗数据安全指南: GB/T 39725-2020[S]. 北京: 中国标准出版社, 2020: 4-5.
|
| [2] |
中国医院协会信息专业委员会. 2023-2024年度中国医院信息化状况调查报告[R/OL]. (2025-03-20) [2026-04-19]. https://www.chima.org.cn/Html/News/Articles/17294.html.
|
| [3] |
Directorate-General for Health and Food Safety. A European Health Data Space: harnessing the power of health data for people, patients and innovation[R]. Strasbourg: Directorate-General for Health and Food Safety, 2022.
|
| [4] |
European Union. Reuse of health data[EB/OL]. [2026-05-19]. https://health.ec.europa.eu/ehealth-digital-health-and-care/reuse-health-data_en.
|
| [5] |
MARLIES S, LOUISE M, WANNES V H, et al. Expanding citizen engagement in the secondary use of health data: an opportunity for national health data access bodies to realise the intentions of the European health data space[J/OL]. Arch Public Health, 2023, 81(1): 168 [2023-09-12]. https://pubmed.ncbi.nlm.nih.gov/37700330/.
|
| [6] |
BECKER R, CHOKOSHVILI D, DOVE E S. Legal Bases for Effective Secondary Use of Health and Genetic Data in the EU: Time for New Legislative Solutions to Better Harmonize Data for Cross-Border Sharing?[J]. International Data Privacy Law, 2024, 14(3): 223-246.
|
| [7] |
Ihe-europe. MyHealth@EU - Building Digital Health Services Across Europe[EB/OL]. (2022-10-21) [2026-05-19]. https://www.ihe-europe.net/sites/default/files/PDF%20EXP%2022/7-IHE_ExP_DAY_PPT_kJirakova_2022%20(002).pdf.
|
| [8] |
European Union. HealthData@EU Central Platform[EB/OL]. (2025-10-03) [2026-05-20]. https://acceptance.data.health.europa.eu/healthdata-central-platform/home?locale=en.
|
| [9] |
European Parliament and of the Council. Regulation (EU) 2025/327 of the European Parliament and of the Council of 11 February 2025 on the European Health Data Space and amending Directive 2011/24/EU and Regulation (EU) 2024/2847 [EB/OL]. (2025-03-05) [2026-05-20]. https://eur-lex.europa.eu/eli/reg/2025/327/oj/eng.
|
| [10] |
胡峰. 从数据可供到空间可信: 数据空间的逻辑生成、实践塑成与机理证成[J]. 图书馆学研究, 2025(8): 57-67.
|
| [11] |
European Union. Guideline for Health Data Access Bodies on the procedures and formats for data access[EB/OL]. (2025-09-17) [2026-04-19]. https://tehdas.eu/wp-content/uploads/2025/09/draft-guideline-for-health-data-access-bodies-on-the-procedures-and-formats-for-data-access.pdf.
|
| [12] |
BROUMAS A. Key Takeaways from the European Health Data Space Regulation[EB/OL]. (2025-05-10) [2026-04-19]. https://lawandtech.eu/en/2025/05/10/ehds-regulation/.
|
| [13] |
WERRY S, ÉLES K, RIDGWAY W, et al. The European Health Data Space-What EU Health Care Providers and Data Holders Need to Know [EB/OL]. (2025-06-25) [2026-04-19]. https://www.skadden.com/insights/publications/2025/06/the-european-health-data-space.
|
| [14] |
潘姚. 欧盟健康医疗数据二次利用制度研究及启示[J]. 医学与哲学, 2025, 46(10): 23-27.
|
| [15] |
EDCAR. European Health Data Space: European Parliament and the Belgian Presidency of the Council agree on the conditions of its creation[EB/OL]. (2024-03-15) [2026-04-19]. https://fedcar.eu/en/news/europe/2024/03/european-health-data-space-european-parliament-and-the-belgian-presidency-of-the-council-agree-on-the-conditions-of-its-creation/#top.
|
| [16] |
王纯. 人健康医疗信息保护模式考察[N]. 人民法院报, 2024-01-26(08).
|
| [17] |
林梓瀚, 马有梅, 郭丰. 美国数据要素流通法律体系构建及对我国的启示[J]. 中国科学院院刊, 2025, 40(11): 2101-2109.
|
| [18] |
Office for Civil Rights. Summary of the HIPAA Privacy Rule[EB/OL]. (2025-03-14) [2026-04-19]. https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regu-lations/index.html.
|
| [19] |
ALDER S. HIPAA Explained [EB/OL]. (2024-12-10) [2026-04-20]. ,and%20guaranteeing%20coverage%20renewability%20multi-employer%20health%20insurance%20plans.
|
| [20] |
GUNN P, FREMONT A, BOTTRELL M, et al. The Health Insurance Portability and Accountability Act Privacy Rule: a practical guide for researchers[J]. Medical Care, 2004, 42(4): 321-327.
|
| [21] |
Office of the Assistant Secretary for Planning and Evaluation. Standards for Privacy of Individually Iden-tifiable Health Information[EB/OL]. [2026-04-20]. https://aspe.hhs.gov/standards-privacy-individually-identifiable-health-information.
|
| [22] |
ALDER S. What is a HIPAA Business Associate Agreement?[EB/OL]. (2026-01-05) [2026-04-20]. https://www.hipaajournal.com/hipaa-business-associate-agreeme-nt/#:-:text=A%20HIPAA%20Business%20Associate%20Agreement%20is%20most%20often,Protected%20Health%20Information%20%28PHI%29%20for%20a%20HIPAA-regulated%20activity..
|
| [23] |
PETERSEN S, HOLMAN T. What is HITECH (Health Information Technology for Economic and Clinical Health) Act of 2009?[EB/OL]. (2024-09-23) [2026-04-20]. https://www.techtarget.com/searchhealthit/definition/HITECH-Act.
|
| [24] |
Office for Human Research Protections. Federal Policy for the Protection of Human Subjects ‘Common Rule’ [EB/OL]. (2025-06-25) [2026-04-20]. https://www.hhs.gov/ohrp/regulations-and-policy/regulations/common-rule/index.html.
|
| [25] |
Office for Civil Rights. Guidance Regarding Methods for De-identification of Protected Health Information in Accordance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule[EB/OL]. (2025-02-03) [2026-04-20]. https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html.
|
| [26] |
MILAM S. HIPAA Privacy Rule’s Safe Harbor De-Identification Method[EB/OL]. (2023-08-02) [2026-04-20]. https://www.networkforphl.org/wp-content/uploa-ds/2020/01/De-Identification_HIPAASafeHarbor-10-1-19.pdf.
|
| [27] |
National Institutes of Health. How Can Covered Entities Use and Disclose Protected Health Information for Research and Comply with the Privacy Rule?[EB/OL]. [2026-04-21]. https://privacyruleandresearch.nih.gov/pr_08.asp.
|
| [28] |
COOK J. The 18 HIPAA Safe Harbor identifiers explained[EB/OL]. (2025-12-24) [2026-04-21]. https://www.johndcook.com/blog/hipaa-identifiers-explained/.
|
| [29] |
ALDER S. What is a Limited Data Set Under HIPAA?[EB/OL]. (2025-01-09) [2026-04-21]. https://www.hi-paajournal.com/limited-data-set-under-hipaa/#:-:text=A%20limited%20data%20set%20under%20HIPAA%20is%20a,authorization%20from%20patients%2C%20if%20certain%20conditions%20are%20met.
|
| [30] |
Institutional Review Board. Definition of Limited Data Set[EB/OL]. (2024-12-13) [2026-04-21]. https://www.hopkinsmedicine.org/institutional-review-board/hipaa-research/limited-data-set.
|
| [31] |
SPRIGGLE A. Limited Data Set: The Complete Guide[EB/OL]. [2026-04-21]. https://cvi-qa.clarityclient.com/glossary/limited-dataset.
|
| [32] |
TREMBLA T. What is a Limited Data Set Under HIPAA?[EB/OL]. (2023-05-16) [2026-04-21]. https://www.kohezion.com/blog/what-is-a-limited-data-set-under-hipaa.
|
| [33] |
Colorado Multiple Institutional Review Board. Waivers of Informed Consent, Waivers of Documentation of Informed Consent, and Waivers of HIPAA Authorization: Guidance for Investigators[EB/OL]. (2021-12-09) [2026-04-21]. https://research.cuanschutz.edu/docs/librariesprovider148/comirb_documents/guidance/cg-80_informed-consent-waivers_09-10-21.pdf?sfvrsn=a88ccbba_2.
|
| [34] |
Legal Information Institute. 45 CFR § 46.111-Criteria for IRB approval of research. [EB/OL]. (2025-09-04) [2026-04-21]. https://www.law.cornell.edu/cfr/text/45/46.111.
|
| [35] |
Legal Information Institute. 45 CFR § 46.116-General requirements for informed consent.[EB/OL]. [2026-04-21]. https://www.law.cornell.edu/cfr/text/45/46.116.
|
| [36] |
Legal Information Institute. 45 CFR § 164.512-Uses and disclosures for which an authorization or opportunity to agree or object is not required.[EB/OL]. [2026-04-21]. https://www.law.cornell.edu/cfr/text/45/164.512.
|
| [37] |
Office for Civil Rights. SAMPLE BUSINESS ASSOCIATE AGREEMENT PROVISIONS[EB/OL]. (2024-01-25) [2026-04-21]. https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html.
|
| [38] |
SVINGEL L, JENSEN C, KJELDSEN G, et al. Shaping the future EHDS: recommendations for implementation of Health Data Access Bodies in the HealthData@EU infrastructure for secondary use of electronic health data[J]. European Journal of Public Health, 2025, 35(3): 37.
|
| [39] |
GRADY C. Institutional Review Boards: Purpose and Challenges[J]. Chest, 2015, 148(5): 1148-1155.
|
| [40] |
NIH Pragmatic Trials Collaboratory. IRB Responsibilities and Procedures[EB/OL]. (2025-09-26) [2026-04-21]. https://rethinkingclinicaltrials.org/chapters/ethics-and-regulatory/irb-responsibilities-and-procedures/introduction-irb-responsibilities-and-procedures/.
|
| [41] |
王琴. 国家数据局: 继续支持数据交易所、数据交易中心建设[EB/OL]. (2025-11-25) [2026-05-19]. https://www.chinanews.com.cn/cj/2025/11-25/10521401.shtml.
|
| [42] |
北京大学健康医疗大数据国家研究院. 北京大学健康医疗大数据平台简介[EB/OL]. (2020-08-05) [2026-04-21]. https://www.nihds.pku.edu.cn/dwfw/jkyldsjpt.htm.
|
| [43] |
袁康, 鄢浩宇. 数据分类分级保护的逻辑厘定与制度构建--以重要数据识别和管控为中心[J]. 中国科技论坛, 2022(7): 167-177.
|