International transfers of health data between the EU and USA: a sector-specific approach for the USA to ensure an 'adequate' level of protection.

"data sharing and open innovation working paper at 3-4 (forthcoming: science & public policy (oxford university press2019"

"143: 45 C.F.R. § 164.508(a)(1); see also U.S. Dept. of Health and Human Services, Summary of HIPAA Privacy Rule, https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html. (“A major purpose of the Privacy Rule is to define and limit the circumstances in which an individual’s protected heath information may be used or disclosed by covered entities. A covered entity may not use or disclose protected health information, except either: (1) as the Privacy Rule permits or requires; or (2) as the individual who is the subject of the information (or the individual’s personal representative) authorizes in writing.”)."

"The authors thank anonymous reviewers for their helpful comments. The authors acknowledge the support by the Novo Nordisk Foundation for the scientifically independent Collaborative Research Program for Biomedical Innovation Law (grant NNF17SA0027784)."