Mithras Regulation worldwide · 8 field notes
Regulation worldwide
HIPAA, GDPR, the EHDS, Washington’s My Health My Data — every jurisdiction draws the lawful-basis line differently. These pieces explain what each regime actually permits for research, without the legal-memo fog.
8 of 50 field notes · Regulation worldwide · plain language
The journal holds 50 field notes across 7 sections: Patient rights (8), Privacy & de-identification (8), Standards & interoperability (8), Regulation worldwide (8), Research methods (8), Chronic conditions (6), Principles (4). You are viewing the Regulation worldwide section.
Washington's My Health My Data Act: America's strictest health-privacy law
Washington's My Health My Data Act explained: consumer health data beyond HIPAA, signed authorizations to sell, geofencing bans, and a private right of action.
№ 16 Regulation worldwideWhat an IRB actually does: research ethics review, explained
What an IRB does in research: where ethics review came from, how risk-benefit review works, expedited vs. full board, and why approval should gate release.
№ 21 Regulation worldwideThe European Health Data Space, explained: what secondary use will look like
The European Health Data Space (EHDS), explained: health data access bodies, secondary-use permits, the opt-out, and the 2027–2031 timeline.
№ 26 Regulation worldwideBeyond HIPAA: the new wave of US state health-privacy laws
The new state health privacy laws beyond HIPAA — Washington's MHMD, Nevada SB 370, Connecticut — and why building to the strictest standard wins.
№ 32 Regulation worldwideHIPAA and research: authorizations, waivers, and the §164.508 path
How HIPAA treats research: the §164.508 authorization path, IRB waivers, and de-identification — three lawful routes and what each asks of patients.
№ 35 Regulation worldwideWhy health data can't just cross borders — and how research happens anyway
Why cross-border health data transfer is so hard — Schrems II, adequacy, data localization — and how federated research gets answers without moving records.
№ 42 Regulation worldwideGDPR and health research: what Article 9 really permits
What GDPR Article 9 really permits for health data research: explicit consent vs. the research exemption, and why consent travels best across borders.
№ 47 Regulation worldwideHealth-data research in the UK: UK GDPR, the DPA 2018, and the NHS
How UK GDPR, the Data Protection Act 2018, the duty of confidentiality, and the national data opt-out shape NHS health data research in the UK.