Regulatory recommendations for IoT smart-health care services by using privacy impact assessment (PIA)

This paper aims to propose regulatory recommendations for IoT smart-health care service, by using the method of Privacy Impact Assessment (PIA). We utilize data from a relevant IoT smart-health care project in Indonesia. On structuring the final regulatory recommendations, we have conducted in-depth interview to the stake holders of Indonesian IoT smart-health care service. The results show that there are 5 aspects that need to be set in the proposed regulations, i.e. security compliance, device security, secure communications, virtualization security, and application security. In each of that aspect, we have built specific recommendation to ensure IoT service provider giving the best service without decreasing comfort of private information protection.