datamanagement - Pryv https://pryv.github.io/www/tag/datamanagement/ eHealth Data Middleware Wed, 27 Oct 2021 14:21:30 +0000 en-US hourly 1 Data Residency: insights on where to store the personal data you collect https://pryv.github.io/www/2020/08/03/data-residency-insights-on-where-to-store-the-personal-data-you-collect/ Mon, 03 Aug 2020 18:19:07 +0000 https://pryv.github.io/www/?p=6737 Data Residency: where the home for your data is. Data Localization: a business choice or a legal obligation? We live in a world where information can travel across borders within a heartbeat. Yet, if […]

The post Data Residency: insights on where to store the personal data you collect appeared first on Pryv.

]]>
Data Residency: where the home for your data is.

Data Localization: a business choice or a legal obligation?

We live in a world where information can travel across borders within a heartbeat. Yet, if it can be rendered anytime anywhere, it has to be stored somewhere at some point. 

Finding out where that somewhere should be can be quite a puzzle to solve. Preferably, you want it to be safe, compliant, as well as economically interesting. But mostly, finding the right location for storing valuable information is a legal conundrum that you will have to solve carefully. Especially when managing the personal data of users from various nationalities, as each country poses different geographic limitations as regards to data residency.

The challenges of finding a Safe Home for Your Data

Organizations might think that this is an easy task. But at a time of global data exchange and the multiplication of data privacy laws, choosing the right place for storing personal data is becoming increasingly challenging.

Depending on their business location, companies will have to address different legal requirements. Depending on the place of residence of their users, different expectations. And depending on the data they collect, even additional constraints and limitations. So how to keep up with all that?

#1 Address the legal requirements of your business location

One of the first things companies should consider when thinking about data storage location is where they are located and which data-related laws apply to their location.

Specifically, two things have to be checked: first, the scope of the law, which determines to whom, to what and where the law applies. Second, possible additional provisions such as the ones in the chapter 5 of the GDPR addressing the “transfers of personal data to third countries or international organizations”. Based on these indications, you will be able to get a first idea of what can be done or not within the borders of your country.

#2 know everything about your users’ location and their data

Another parameter to be taken into account when resolving the issue of data residency is the place of residence of the users and the type of data about them that are being collected.

Mostly, because some legislation defines their scope of application according to users’ location (like the GDPR). But also, because users are now more aware about data privacy and start to have higher expectations as to where their data should live. Besides, depending on the data collected, some additional constraints might be added by regional regulatory authorities, like the HDS Certification required for health data hosting in France.

#3 check the laws surrounding your third-parties’ location

Now for economic reasons, some companies may be tempted to have their data stored in a country that is neither that of the company nor that of their users.

Nevertheless, such decisions should be made wisely. The recent Shrems II judgment of the EU Court of Justice (CJEU) is a good example of why transferring data to a third-party country might be problematic as regards to users’ data protection rights. In particular, companies should consider the issue of having personal data transferred within the borders of a country where the law provides government access to these data.

So where is it, the “right” place for your data? Is it in the EU? the US? Or maybe a little bit of both? Choosing a data storage location should not be a matter of choosing a good compromise for all the data, but choosing the right location for each data separately, so that each user can feel secure about his or her data place of residency. So maybe, the “right” decision might be giving the users a choice as to where their data should live?

Now how can we help you with that? Companies can use Pryv.io’s decentralized design to individually store the personal data they collect according to their users location.

Take a peek at our solution: Pryv.io’s Regional data hosting distributed model.

Pryv.io is a personal data lifecycle management platform specifically engineered to empower businesses to rapidly create and scale breakthrough, privacy compliant products.

With Pryv.io, companies can easily store their data into a distributed environment to enable local (on- premise/per choice) Regulations Compliance, and even create installations that span the globe and co-locate the data with the users’ legislation.

Indeed, with Pryv, all data is kept per-user, making it very easy for our customers to redirect each data to a distinct server according to their users’ geographic locations. Based on a powerful distributed model, users are distributed among servers with no global bottleneck.

Each user account can be then stored on a different server, which can be located anywhere. The capabilities are set by the infrastructure in terms of bandwidth and storage. The architecture is designed according to the client’s needs.

Thanks to Pryv recent partnership with Euris Cloud Santé®, we also provide a complete data storage and privacy back-end solution. In France,  companies can efficiently meet both french HDS and data privacy and residency requirements.

Learn more about our different offerings: Pryv + Cloud Santé® PRIVACY

Stephanie & Evelina @ Pryv

https://pryv.github.io/www

pryv.github.io

The post Data Residency: insights on where to store the personal data you collect appeared first on Pryv.

]]>
50 Shades of “Dark Patterns” to deceive privacy regulations https://pryv.github.io/www/2020/08/03/50-shades-of-dark-patterns-to-deceive-privacy-regulations/ Mon, 03 Aug 2020 17:49:29 +0000 https://pryv.github.io/www/?p=6733 Dark Patterns in Action: Privacy-by-design or Deceived-by-design? Enlightenment in Delusion The trust in the Internet has been lost. Yet we use technology more than ever before. Every single day, millions of applications are being […]

The post 50 Shades of “Dark Patterns” to deceive privacy regulations appeared first on Pryv.

]]>
Dark Patterns in Action: Privacy-by-design or Deceived-by-design?

Enlightenment in Delusion

The trust in the Internet has been lost. Yet we use technology more than ever before. Every single day, millions of applications are being downloaded and fed by personal data. Whoever knows what it is being used for. We have been promised to be protected. We have heard “privacy-by-design” many times now, but have we understood it? Probably we did not. As we are still being deceived-by-design by many applications.

Yet things are supposed to have changed. “Businesses took actions”, we wish to believe… And some of them really did. The problem, however, is that we see the majority of companies only partially resolving the personal data management and privacy compliance challenges. Whereas according to the GDPR, privacy should be embedded in every aspect of personal data collecting apps. Starting from the very beginning of establishing the relationship between the two parties, through the part that is visible for the users: the UI.

The Beauty and the Beast in UI: Privacy-by-design or Deceived-by-design?

UI Design is a big part of today’s software applications. More than a pretty look, it is what allows companies to interact with their users and guide them through their app. In terms of compliance, it is also what allows them to ask for users’ consent and provide their users with the means to execute their rights to privacy. Which is why companies should be careful not to include marketing practices that go against privacy requirements when building their designs.

Still, while we often speak about user-experience and user-engagement, we rarely discuss the “dark patterns”: the tricks used in UI designs to make users do things online that they would normally not do. Have you ever heard about them?

Dark patterns are the tricks that make you:

…Consent to things that you are not even aware of.

…Share more information about you that you really want to, an action that became popular as “Privacy Zuckering”.

…Pay for things you didn’t even want to buy in the first place.

Dark Patterns Examples

Whichever it is, it is highly probable that you have been deceived-by-design many times already. The problem is: while UI design can be used to nudge people into making the best choices for themselves, it can also be used to deceive them into sharing more of their personal data than they would usually like to. But what is the “right” choice for the user?

Nudging users into making the « right » decisions

If personal data collecting apps aren’t easy to implement in terms of compliance, they certainly aren’t easy to design in this regard as well. Practically: how to strike the right balance between best marketing practices and data privacy regulations?

When persuasion becomes manipulation.

While the GDPR poses legal frontiers to nudge companies into making the “right” choice for their users, recent studies show that they still have a hard time going against their own business interest especially at a time when data brokerage shows to be a particularly profitable business. Yet, there are other ways to monetize personal data, and even based on a privacy-approach.

Some pathways and actions are more enticing than others. Of course, it can be fun to use gamification techniques to make an App more appealing and increase users’ engagement, but some lines shouldn’t be crossed. Especially when speaking of mobile health applications. For example, mental health-websites that sell personal data, such as the results of depression tests, to 3rd parties – such as the case with Doctissimo.

Is it game over? Take it to the next level: Dark Patterns for good

Light the way. Dark patterns might be properly used. We have seen  typical ‘dark’ patterns, being used for the right reasons, for example in Open Banking. Ethically Evil: how to use dark patterns for good 

So, the question remains: how to strike the right balance between best marketing practices and data privacy regulations?

It is all about a shift in Mindset: Achieving privacy should not be seen as a problem, but rather as the goal. So Make trust your first priority! And next time you need to implement a new design for your app, start with “what” not “why”, and ask yourself: what is the goal of this application and how to ensure privacy-by-design, turning it into your winning ticket? You’ll be surprised what you can come up with!

Welcome to Privacy-as-a-State-of-Mind: We had a hand in. 

For us at Pryv, achieving privacy is not about resolving compliance, it is the goal: privacy as a norm. As a back-end privacy provider, we can certainly help businesses collecting personal data to embed privacy into their systems, ensuring that the data they are collecting is consented rightly, managed and stored, compliantly. Yet, this is just one side of the coin. Companies have to meet us halfway to build a fully privacy-by-design, compliant solution.

https://pryv.github.io/www

pryv.github.io

github.com/pryv/open-pryv.io

Yours,

Evelina & Stephanie

Sources:

https://www.darkpatterns.org/

https://hellofuture.orange.com/en/what-are-dark-patterns-and-their-impacts-on-personal-daa/ 

https://darkpatterns.org/types-of-dark-pattern.html

https://privacyinternational.org/news-analysis/3986/mental-health-site-sharing-your-personal-data-were-going-after-them 

https://www.fastcompany.com/90452333/why-you-still-cant-escape-dark-patterns

https://securityboulevard.com/2018/12/dark-patterns-stealth-ways-companies-collect-personal-data/

https://fil.forbrukerradet.no/wp-content/uploads/2018/06/2018-06-27-deceived-by-design-final.pdf

https://medium.com/@mohityadav0493/privacy-zuckering-deceiving-your-privacy-by-design-d41b6263b564

https://www.europeandatajournalism.eu/eng/News/Data-news/Dark-patterns-born-to-mislead

The post 50 Shades of “Dark Patterns” to deceive privacy regulations appeared first on Pryv.

]]>
Euris and Pryv simplify personal data management: A ready-to-use solution to meet GDPR and Health Data Hosting requirements. https://pryv.github.io/www/2020/07/01/euris-and-pryv-simplify-personal-data-management-a-ready-to-use-solution-to-meet-gdpr-and-health-data-hosting-requirements/ Wed, 01 Jul 2020 19:28:28 +0000 https://pryv.github.io/www/?p=6590 Lausanne, Switzerland – Paris, France, July 2nd, 2020 – The Swiss leading provider of privacy and personal data management software, Pryv SA, and the leading connected health operator in France, Euris Health Cloud®, announced […]

The post Euris and Pryv simplify personal data management: A ready-to-use solution to meet GDPR and Health Data Hosting requirements. appeared first on Pryv.

]]>
Lausanne, Switzerland – Paris, France, July 2nd, 2020 – The Swiss leading provider of privacy and personal data management software, Pryv SA, and the leading connected health operator in France, Euris Health Cloud®, announced a strategic partnership for delivering a ready-to-be used solution for rightfully managing and securely storing personal health data.

A ready-to-use data management solution to achieve GDPR compliance and meet health data hosting requirements. 
Companies willing to collect and use personal health data can now benefit from a complete, ready-to-use, and scalable solution, offered by Euris Health Cloud® (health data hosting) and Pryv (personal data and privacy compliance middleware). In Europe, the solution combines a certified HDS (*) hosting offer for security and a personal healthcare data management service for privacy, allowing e-health actors to rigorously manage personal health data and quickly create applications that respect the rights of the patient at an attractive cost.

”Contrary to what companies may believe, the HDS Certification of their hosting provider in no way implies their compliance with the GDPR. All it tells them is that their host offers sufficient data protection guarantees.” says Pierre-Mikael Legris, CEO at Pryv “The complementarity of HDS hosting and GDPR compliance solutions is perfectly illustrated by our partnership with Euris.”

 

“Combining our expertise with Pryv knowledge and Pryv.io capabilities, we provide a unique and proven off-the-shelf solution that allows companies to achieve an optimal data management and protection solution globally through a new bundle offer for startups and innovative e-health projects.“ says Pedro Lucas, CEO at Euris Health Cloud®.

With the offerings Cloud Santé® PRIVACY and Cloud Santé® PRIVACY STARTUP by Euris and Pryv, companies operating in Europe can now meet both French HDS and EU GDPR requirements with no expertise required on their part, allowing them to focus on their core business and increase user engagement through trust and transparency.

About Euris Health Cloud®: www.euris.com

Euris Health Cloud® is a connected healthcare operator, specialized in the hosting of healthcare data. Euris Health Cloud® provides a global hosting infrastructure for personal health data, in compliance with local regulations: EU (HDS: 2018 &ISO 27001 2013), US (HIPAA), China (CSL).

Thanks to a unique marketplace model, Euris Health Cloud® also offers a complete range of interoperable services and solutions, facilitating the deployment of e-health projects: strong authentication, drive, archiving, backup, anonymization, Big Data, Business Intelligence, IoT, telemedicine, CRM, PRM and Healthcare Data Warehouse.

About Pryv: pryv.gihub.io/www

Pryv.io is an extensible personal data lifecycle management platform specifically engineered to empower developers to rapidly create and scale breakthrough GDPR and HIPAA compliant products, services, and experiences. The software has been developed to accommodate rapid integration. It comes with turnkey IoT connectivity, a secure storage vault, fine-grained consent management, and comprehensive auditing capability that radically cut IT development costs and accelerate time-to-benefit while addressing the most stringent data protection requirements.

(*) Certified HDS: « Hébergement de Données de Santé » (French Health Data Hosting certification based on ISO 27001 standard and GDPR regulation)

The post Euris and Pryv simplify personal data management: A ready-to-use solution to meet GDPR and Health Data Hosting requirements. appeared first on Pryv.

]]>
Pryv SA releases an Open-Source Solution for Personal Data & Privacy Management https://pryv.github.io/www/2020/06/08/pryv-sa-releases-an-open-source-solution-for-personal-data-privacy-management/ Mon, 08 Jun 2020 06:38:44 +0000 https://pryv.github.io/www/?p=6464 The release of Open Pryv.io delivers a free, full production, easy-to-install open-source solution for the collection and management of sensitive personal and health data. Lausanne, Switzerland, June 9th, 2020 — Today, Pryv SA, the leading Swiss provider […]

The post Pryv SA releases an Open-Source Solution for Personal Data & Privacy Management appeared first on Pryv.

]]>
The release of Open Pryv.io delivers a free, full production, easy-to-install open-source solution for the collection and management of sensitive personal and health data.

Lausanne, Switzerland, June 9th, 2020 — Today, Pryv SA, the leading Swiss provider of personal data and privacy management software announced the open-source release of Open Pryv.io: a free and scalable personal data lifecycle management platform specifically engineered to empower developers to rapidly create and scale breakthrough, GDPR, and privacy compliant products, services, and experiences.

As developer productivity has become a competitive necessity, the ready-to-use Open Pryv.io is marking a turning point to de-complexify the development of personal data and digital health applications.

Data pooling, data aggregation, consent management, and data interoperability are among the Open Pryv.io’s capabilities that are raising the bar for delivering a reliable solution for collecting and managing heterogeneous sets of real-world personal data with full respect to privacy.

“Releasing our core software in open-source today is a natural move for us. From day one, Pryv.io was built to be open-sourced” says Pierre-Mikael Legris, CEO and co-founder of Pryv SA. ”In fact, our source code has always been open for our clients. By releasing Open Pryv.io, we provide any company with a tool allowing them to address the enhanced citizen’s right, which sends a strong message of transparency and inclusivity”.

Fostering faster innovation and less duplication of effort are also among the main drivers of Open Pryv.io’s release. Nowadays developers value using open-source instead of redeveloping available code. Integrating Pryv.io open components will allow developers to free them up to work on what is unique in their products and add privacy-by-design to their value proposition.

Open sourcing our code is doing the right thing – for the community, for our clients, and for Pryv. We should have done it much earlier.” adds Simon Goumaz, Co-Founder and Board Member at Pryv SA.

The Open Pryv.io release takes place at a time when the pandemic disruption has cast a harsh light on the notion of personal data collection and privacy respect. As governments have been lifting data protection restrictions in an attempt to ease access to personal data to protect public health, the release of Open Pryv.io shows that there is a way to encourage personal data collection being done right. Open Pryv.io urges to build a world where privacy is the norm – not the exception as it is today.

“Privacy doesn’t have to be only secrecy. We envision a world where privacy is the ability to share your data with awareness and control. For years now, we prove that respecting one’s privacy and having access to their data are not contradictory. The more transparent you are, the strongest relationships you will build with your users” says Evelina Georgieva, Co-Founder and CBDO at Pryv SA. “No more excuses: the Open Pryv.io offers developers a strong foundation to ensure that the personal data they collect are rightfully managed from day 1.

Alongside this new release, which offers essential features of the Pryv.io software following an open-core model, Pryv continues executing its growth strategy by licensing the enterprise-class version to projects that require high scalability, compliance documentation and dedicated support.

About Pryv

Founded in 2012, Pryv makes health personal data processing as secure and trustworthy as online banking. We help organizations manage personal data from creation through use and sharing,

Our Swiss-made Personal Data & Privacy Management Software- Pryv.io is a solid foundation on which you build your own personal data and digital health solutions. The software has been developed to accommodate rapid integration. It comes with turnkey IoT connectivity, a secure storage vault, fine-grained consent management and comprehensive auditing capability that radically cut IT development costs and accelerate time-to-benefit while addressing the most stringent data protection requirements.

The post Pryv SA releases an Open-Source Solution for Personal Data & Privacy Management appeared first on Pryv.

]]>
Master the GDPR Compliance Checklist with Pryv.io https://pryv.github.io/www/2020/12/11/gdpr-checklist-pryv/ Fri, 11 Dec 2020 03:59:05 +0000 https://pryv.github.io/www/?p=6982 Master the GDPR Compliance Checklist with Pryv.io It’s not news: from two years already, if you’re a company operating with EU citizens personal data, you have to comply with the GDPR (General Data Protection […]

The post Master the GDPR Compliance Checklist with Pryv.io appeared first on Pryv.

]]>
Master the GDPR Compliance Checklist with Pryv.io

It’s not news: from two years already, if you’re a company operating with EU citizens personal data, you have to comply with the GDPR (General Data Protection Regulation). Effective since 25 May 2018, the regulation sets out a number of legal obligations to be met in terms of privacy requirements and generous fines to be paid for those who don’t play by its rules. Yet in spite of its not-so newness, a lot of questions are still arising when it comes to GDPR compliance: how to achieve it? Where to start? How to leverage its requirements into a competitive advantage?

 Master the GDPR Compliance Checklist with Pryv

While lots of companies see the GDPR as a boring legal conundrum to solve, it is actually one of the best frameworks you can use to flourish and scale up your business. That is of course, assuming you do it smartly; we bet you would rather use your resources to enhance your application than have them stuck finding a way to answer on the user’s rights on their data: how to execute their consent, where to store their data… getting a copy of the data ready, process to delete it? At the end of this article, you’ll be the one ready to master your GDPR compliance and know how Pryv.io’s capabilities can help you thrive in the blooming personal data economy.

GDPR 101: a checklist to achieve compliance

To make it easier for companies to navigate the storm of the GDPR data protection and privacy requirements, the gdpr.eu website provides easy-to-understand, compliance guidance through a variety of digital content aiming at explaining and/or highlighting the specifics of the regulation. Especially, they provide a free, online GDPR Compliance Checklist that businesses can use as a framework to achieve their own compliance. This is exactly where you want to start when asking: “Am I ready for the GDPR?”

Divided in four parts, the checklist sets out a list of 19 things to be checked or done (preferably before going to market!) in order to reduce the risks of regulatory penalties.

The checkups are regrouped by privacy-related “themes”:

  1. Lawful basis and transparency
  2. Data Security
  3. Accountability and governance
  4. Privacy rights

In the following, we will show for each of these checkups how you can leverage our technology to achieve GDPR compliance while increasing your business efficiency.

GDPR Compliance Checklist @ glance, with Pryv

Pryv.io is an extensible personal data life-cycle management platform specifically engineered to empower businesses to rapidly create and scale breakthrough, GDPR compliant applications.

A lot of organizations are skeptical about involving a third-party for their privacy – we get it.

So let’s be clear: we don’t access or host any data. All we do is to provide our clients with a ready-to-use, scalable piece of code/software that can be used to rightfully collect, store, share and use personal data. Moreover, you can even choose where you want the data to be stored for each user separately, so it is both safe and compliant with all relevant data residency laws. Pryv.io will then be deployed on the servers and/or infrastructure of your choice. 

GDPR Compliance Checklist

How Pryv helps you solve it

Lawful basis and transparency
  1. Conduct an information audit to determine what information you process and who has access to it.
  2. Have a legal justification for your data processing activities.
  3. Provide clear information about your data processing and legal justification in your privacy policy.
These checkups will help you ensure a lawful, transparent collection and processing of personal data.As for our part, we provide you with a comprehensive and easy-to-scale Software Solution that you can use to easily keep track of what information you process as your business grows. If your legal justification is consent, the Pryv.io eConsent mechanism will allow you to keep track of every consent and related data-accesses per user.

As a plus, the Pryv.io data model is designed to enhance data aggregation, thus allowing for increased business efficiency on your side. On demand, we also help our clients with their data strategy & privacy policies. 

Data Security
  1. Take data protection into account at all times, from the moment you begin developing a product to each time you process data.
  2. Encrypt, pseudonymize, or anonymize personal data wherever possible.
  3. Create an internal security policy for your team members, and build awareness about data protection.
  4. Know when to conduct a data protection assessment, and have a process in place to carry it out.
  5. Have a process in place to notify the authorities and your data subjects in the event of a data breach.
This part is about ensuring that the personal data you collect will be safe, secured and well protected. As said before, we do not access or host any data. Using Pryv.io will thus not jeopardize your internal security; at best, it can also help you achieve it. Our software is privacy-by-design and provides encryption for data “at move” (during transmission). For data at rest: Pryv.io supports client-side mechanisms so you can add as many security layers as you need.

Pryv.io’s segmentation of data and aliasing feature (Release Q1 2021) also allows to selectively share data pseudonymized or anonymised if there is no data that allows identification.

In addition, Pryv.io’s audit module provides information to security systems that can be used to detect a data breach, and further help you identify which data has been leaked. As our client, you will also benefit from our partnerships with data security and hosting providers, such as Build38 and Euris Health Cloud®. 

Accountability and governance
  1. Designate someone responsible for ensuring GDPR compliance across your organization.
  2. Sign a data processing agreement between your organization and any third parties that process personal data on your behalf.
  3. If your organization is outside the EU, appoint a representative within one of the EU member states.
  4. Appoint a Data Protection Officer (if necessary).
Someone has to ensure that the personal data you collect is properly handled throughout your organization and beyond.

Pryv.io can help you ensure that he/she understands what is happening in terms of data within your organization. Like banks that provide detailed reports of all transactions in time, classified in bank accounts, the Pryv.io data model provides all data in “time series” contextualised and classified in streams. It is designed to provide the same readability and transparency as your bank report, so anyone could make decisions and check its execution with a minimum of effort.

In this context, Pryv.io can be used as a data controlling tool to be operated by your DPO.

Privacy rights
  1. It’s easy for your customers to request and receive all the information you have about them.
  2. It’s easy for your customers to correct or update inaccurate or incomplete information.
  3. It’s easy for your customers to request to have their personal data deleted.
  4. It’s easy for your customers to ask you to stop processing their data.
  5. It’s easy for your customers to receive a copy of their personal data in a format that can be easily transferred to another company.
  6. It’s easy for your customers to object to you processing their data.
  7. If you make decisions about people based on automated processes, you have a procedure to protect their rights.
Last but not least, this part is about ensuring that you provide your users with the means to enact their rights.

While it is your job to ensure that your customers can enact their rights, on our side, we provide you with the functionalities to execute them.

Built with a user-centric approach, Pryv is designed to ensure these functionalities while maximizing software performance and business efficiency.

In particular:

-> Pryv.io allows you to provide your users with the option to backup their data on their computer or transfer it to another company (data portability, as requested by checkup #17).

(For example, we developed a ”blue button” app, which will allow the data to be exported as JSON files and packed inside a password protected zip file in one click.)

-> Our API methods allow our customers to easily correct/update/delete data inside a user’s account.

-> Pryv.io proposes a specific mode that enables isolation of per-user data in back-ups for deletion.

Our software is privacy-by-default (default opt-out). This is made to ensure that your users have an explicit choice as to accept or object to the processing of their data. All processes have a 1-to-1 relationship with the users of the App, allowing them to update or revoke their consent at all times. This is dynamic consent. 

As a plus: you can further de-risk your compliance with the Pryv.io data-audit embedded feature – so that beyond allowing your users to benefit from their lawful rights, you can also prove that they were respected and executed rightly.

Focus on your core business knowledge and let Pryv.io optimize your organization’s resources for a responsible, efficient, and lawful collection, use, sharing and disposal of information.

In addition, you will be able to benefit from Pryv.io’s latest features: webhooks for real-time data notifications, and many others that will help you boost your business’ success!

Still skeptical? Take a look for yourself: because we believe transparency is key when it comes to privacy, our software is also available in Open Source since this summer.

For all other questions or to book a demo, contact us directly at: https://pryv.github.io/www/contact/

Yours,

Pryv Team

The post Master the GDPR Compliance Checklist with Pryv.io appeared first on Pryv.

]]>
Pryv and BGO launch privacy-centric eCRF solution allowing to capture patient’s RWD and Informed Consent https://pryv.github.io/www/2019/07/13/privacy-ecrf-to-capture-patients-rwd-and-informed-consent/ https://pryv.github.io/www/2019/07/13/privacy-ecrf-to-capture-patients-rwd-and-informed-consent/#respond Sat, 13 Jul 2019 14:03:22 +0000 https://pryv.github.io/www/?p=5624 The innovative RWD eConsent solution is ideal for enhancing clinical trials with Real-World Data (RWD), achieving privacy compliance and improving patients’ engagement. Switzerland, Morges, 12 June 2019 – Pryv, the leading Swiss provider of […]

The post Pryv and BGO launch privacy-centric eCRF solution allowing to capture patient’s RWD and Informed Consent appeared first on Pryv.

]]>
The innovative RWD eConsent solution is ideal for enhancing clinical trials with Real-World Data (RWD), achieving privacy compliance and improving patients’ engagement.

Switzerland, Morges, 12 June 2019 – Pryv, the leading Swiss provider of privacy and personal data management software, and BGO Software, a Bulgaria-based leading software services and product development company, have announced the launch of an innovative eCRF solution to manage Real-World Data (RWD) and informed electronic consent (eConsent).

Designed to meet the requirements of GDPR and HIPAA regulations, the eCRF solution is based on Pryv.io middleware and BGO Software’s Metaforms software. Among the key functionalities of the solution is its ability to dynamically capture and store patients’ informed eConsent. To ensure trust and compliance, a full audit trail documenting interaction with the data is embedded in the solution.

The web-based form-building software allows researchers and clinicians to capture patients’ RWD and pave the way to useable insights . This data includes information from complex forms, questionnaires, voice input, wearable devices, mobile health (mHealth) apps, electronic patient-reported outcomes (ePRO), environment and more.

RWD is considered to be a major source of valuable information from patients in real-world conditions. Capturing RWD improves personalized patient care and enables more efficient scientific and clinical research. Additionally, this data makes it possible to monitor a patient’s safety and evaluate risk, demonstrate efficacy and effectiveness, gain market access and address the public’s growing interest in an efficient and sustainable healthcare system.

Real-World Data is undoubtedly a valuable asset. However, creating and integrating dynamic forms and complying with regulations can be a very complex task and requires specific knowledge,” said Ivailo Ivanov, CTO of BGO Software. “Collaborating with Pryv adds an additional layer to the management of clinical data in our product Metaforms and ensures the patient’s data remains private. This is vital to ensuring they feel confident in sharing their data and giving us access to RWD.

Though the software architecture of an mHealth application is important to ensuring the successful implementation and usage of the solution, this is only one part. A user-friendly design is more than just aesthetics. It plays a crucial role in the patient’s engagement, the operational efficiency, and the overall management of clinical data.

“A regulatory-compliant eCRF solution is one of the most common requests we receive from customers,” said Pierre-Mikael Legris, CEO of Pryv. “A user-friendly design is the key to collecting enriched RWD. By using BGO’s clinical data management experience and engineering know-how, we have been able to create an easy-to-use, modern and intuitive end-to-end solution that captures RWD and manages dynamic eConsent.”

The Pryv/BGO eCRF RWD solution can be accessed anywhere and can be customized to fit the needs and processes of any business or organization. Its functionalities benefit multicenter clinical trials. An API for third-party integrations has been made available to optimize data collection and real-time sharing. The solution is easily adopted and can be quickly launched – a transition to a paperless process is possible within a few weeks and the solution can be deployed on site or over the cloud.

Contact us to book eCRF / RWD platform demo 

About Pryv

Pryv helps organisations manage personal data from creation, use and sharing as well as address the enhanced data subject rights under GDPR such as transparency, portability and right-to-be-forgotten. Packaged for rapid integration, the software solution comes with a turnkey IoT connectivity, secure storage vault, fine-grained consent management and comprehensive auditing capability that radically cut IT development costs and accelerate time-to-benefit while addressing most stringent data protection requirements.

About BGO

BGO designs and develops solutions that help and support a number of governmental institutions, enterprises and IT organizations globally and has considerable expertise, primarily in healthcare, pharmaceutical and the clinical research industry. The company facilitates the work of, researchers, clinicians, CROs, biotechnology experts, trial managers, trial investigators, coordinators and other industry administrative professionals. BGO Software is an official Microsoft Gold Partner, Specialized supplier for manufacturing of IT of Hoffmann-La Roche and Genentech, Official Government Supplier for the Health Research Authority of the Department of Health in the United Kingdom &  Progress Premier Partner.

The post Pryv and BGO launch privacy-centric eCRF solution allowing to capture patient’s RWD and Informed Consent appeared first on Pryv.

]]>
https://pryv.github.io/www/2019/07/13/privacy-ecrf-to-capture-patients-rwd-and-informed-consent/feed/ 0
Pryv, Altran and CSEM introduces Riva Digital oBPM Blood Pressure Monitoring app https://pryv.github.io/www/2018/08/26/meet-rivadigital-obpm-blood-pressure-monitoring-app/ https://pryv.github.io/www/2018/08/26/meet-rivadigital-obpm-blood-pressure-monitoring-app/#respond Sun, 26 Aug 2018 07:11:14 +0000 /?p=4737 Hypertension (High BloodPressure) is the #1 most spread disease in Switzerland- 1 in 5 Swiss is affected. “High BloodPressure is a silent killer, it doesn’t hurt and  you do not feel it, until it […]

The post Pryv, Altran and CSEM introduces Riva Digital oBPM Blood Pressure Monitoring app appeared first on Pryv.

]]>
Hypertension (High BloodPressure) is the #1 most spread disease in Switzerland- 1 in 5 Swiss is affected.

“High BloodPressure is a silent killer, it doesn’t hurt and  you do not feel it, until it is too late” says Dr. Thomas Guggi, Project and Technical Lead at Riva Digital.

At Pryv, we are honoured to support Riva Digital initiative at its mission to increase the health literacy of the Swiss society by providing a solid data management foundation to enable data collection, structure, storage and sharing.

The oBPM app is collaboratively developed by Pryv, CSEM, Altran within digitalswitzerland initiative.

The post Pryv, Altran and CSEM introduces Riva Digital oBPM Blood Pressure Monitoring app appeared first on Pryv.

]]>
https://pryv.github.io/www/2018/08/26/meet-rivadigital-obpm-blood-pressure-monitoring-app/feed/ 0
Pryv and RodanoTech team up to optimise clinical research/trials with patient generated health data https://pryv.github.io/www/2018/08/21/pryv-and-rodanotech-team-up-to-optimise-clinical-research-trials-with-patient-generated-health-data/ https://pryv.github.io/www/2018/08/21/pryv-and-rodanotech-team-up-to-optimise-clinical-research-trials-with-patient-generated-health-data/#respond Tue, 21 Aug 2018 07:22:13 +0000 /?p=4675 Lausanne, 21 August 2018 – Pryv, the leading provider of privacy and personal data management software, today announced a milestone partnership with RodanoTech, the leading Swiss-based CRO specialised in clinical data management services. The […]

The post Pryv and RodanoTech team up to optimise clinical research/trials with patient generated health data appeared first on Pryv.

]]>
Lausanne, 21 August 2018 – Pryv, the leading provider of privacy and personal data management software, today announced a milestone partnership with RodanoTech, the leading Swiss-based CRO specialised in clinical data management services.

The collaboration includes the development of an innovative clinical data management solution providing a comprehensive picture of each patient’s journey – one which combines patient reported outcome (PRO) data with clinical records collected by healthcare professionals. The platform is designed to meet the unique needs of the investigational research as well as the post approval market, including phase IV studies, registries and online medical communities.

Patient relevant outcome measures are a proven necessity to assess the efficiency, effectiveness and personalization of clinical trials” said Samir Mechati, CEO at RodanoTech “It supplements existing clinical data, increases treatment adherence and provides important insight about how patients are doing between medical visits”.

The patient data set is expanding from the high-quality information collected in the clinical protocol to the more private data collated from wearables, mobile apps and in-home clinical devices. By streamlining the collection and integration of this dataset, the joint Pryv/RodanoTech solution ensures a real-time connection with the patient health – capturing insightful data measured and influenced outside the four walls of the clinical setting.


“Real time, real world data that can be captured in patients’ daily lives is a powerful tool to optimise clinical research” said Pierre-Mikael Legris CEO at Pryv “Our platform will not only capture patient data but will also give participants a view on their own trial dataset, sending a strong message of transparency and inclusivity which can turn them truly engaged”.

Patient consent is a critical process that has historically been highly inefficient and prone to error. The joint Pryv/RodanoTech platform optimises that additional level of security between participants and clinical trial sites. Its greatest value comes from its dynamic, fine-grained consent and re-consent capability which gives patients the trust, transparency and control they require from clinical trials. The platform logs all authorizations, including the ‘contract’ between the patient and the investigator, for compliance oversight as mandated by GCP guidelines and privacy regulations.

RodanoTech and Pryv offer tailored solutions to conduct projects of any size, from small Phase I studies to large scale trials involving sophisticated designs and long-term follow-up across clinical settings and geographies. Our Academic offer begins with a “get started” costing for proof of principles and goes to a premium packaged solution for large scale clinical trials.

Contact us to discover the power of a tailor-made platform combining clinical and patient health data and supported by leading experts with extensive experience in clinical development.

About Pryv
Pryv helps organisations manage personal data from creation, to use and sharing as well as address the enhanced data subject rights under GDPR such as transparency, portability and right-to-be-forgotten. Packaged for rapid integration, the software solution comes with a turnkey IoT connectivity, secure storage vault, fine-grained consent management and comprehensive auditing capability that radically cut IT development costs and accelerate time-to-benefit while addressing most stringent data protection requirements.


About RodanoTech
RodanoTech is specialised in clinical data management services and electronic data capture solutions for industry and academic projects. The RODANO platform is the underlying proprietary technology that powers all RodanoTech solutions. RODANO is based on the most recent technical standards to streamline all aspects of the study conduct and complies with the latest recommendations regarding the use of computerized systems in clinical investigations (21 CFR Part 11). The platform can scale and adjust to accommodate clinical trial complexities through systematic automation of repeatable processes while providing appropriate hooks to new data collection methods.

The post Pryv and RodanoTech team up to optimise clinical research/trials with patient generated health data appeared first on Pryv.

]]>
https://pryv.github.io/www/2018/08/21/pryv-and-rodanotech-team-up-to-optimise-clinical-research-trials-with-patient-generated-health-data/feed/ 0
Pryv partners with Net4all to launch a managed hosting solution for privacy and personal data management https://pryv.github.io/www/2018/06/25/pryv-partners-with-net4all-to-launch-a-managed-hosting-solution-for-privacy-and-personal-data-management-gdpr/ https://pryv.github.io/www/2018/06/25/pryv-partners-with-net4all-to-launch-a-managed-hosting-solution-for-privacy-and-personal-data-management-gdpr/#respond Mon, 25 Jun 2018 09:57:27 +0000 /?p=4595 Secure hosted solution enables innovation and accelerates time to GDPR compliance for Swiss startups and SMEs Lausanne, June 26th, 2018 — Pryv, the leading provider of privacy and personal data management software, today announced […]

The post Pryv partners with Net4all to launch a managed hosting solution for privacy and personal data management appeared first on Pryv.

]]>
Secure hosted solution enables innovation and accelerates time to GDPR compliance for Swiss startups and SMEs

Lausanne, June 26th, 2018 — Pryv, the leading provider of privacy and personal data management software, today announced a partnership with Net4all which will give Swiss startups and SMEs access to a secure, compliant and fully managed cloud hosting solution for Pryv.io. This partnership will ensure that sensitive personal data is duly managed thru its lifecycle and kept completely secure under the stringent standards of the Swiss LDP and GDPR legislation. Net4All, one of the top hosting providers in Switzerland, is specialized in Web Hosting, Managed Services and Cyber Security for information systems and digital platforms. The company is ISO 27001 compliant.

“With Pryv.io on a managed cloud, customers get up and running quickly, with enterprise class operational support and proactive monitoring” says Anthony Gerard, CEO at Net4all.

“This way, in-house SME teams can focus on innovation and getting out to market quickly while Pryv and Net4all deliver core privacy functionalities as a service”

Managing privacy can be a costly capital expense that requires skilled resources to operate and maintain business applications in a secure and reliable manner. By hosting Pryv.io within Net4all world-class data centers and leveraging their expert management services, startups and SMEs gets the best of both worlds – rigorous privacy preserving capability at reduced operational costs, greater performance and reliability.

“Today, we are seeing more than three-quarters of startup customers ask about managed cloud hosting” says Pierre-Mikael Legris, CEO at Pryv. “As that deployment model becomes the norm, we are now ready to enable our customers to move to the cloud with confidence, fast, and leveraging the highest standards of reliability, security, and scalability.”

Through this trusted partnership, hosted customers receive the following benefits:

  • A secure hosted environment that best suits their needs, with 24/7/365 support
  • Full ownership of the data and retention of the software rights
  • Custom tailored backup and data retention policy
  • Ability to customize their application and still remain in the cloud
  • Receive software updates and services packs at no additional charge.  

Net4all and Pryv will offer four managed hosting packages with varied levels of support, beginning from a “get started” offering for POCs to a premium Platinum Package for large scale, mission critical environments. The Pryv and Net4all team will sit down with you for consultation to assess your needs and the level of support needed.  

The post Pryv partners with Net4all to launch a managed hosting solution for privacy and personal data management appeared first on Pryv.

]]>
https://pryv.github.io/www/2018/06/25/pryv-partners-with-net4all-to-launch-a-managed-hosting-solution-for-privacy-and-personal-data-management-gdpr/feed/ 0
Altran Switzerland and Pryv join forces to give Life sciences customers a GDPR-proof path to connected health applications https://pryv.github.io/www/2018/06/19/altran-switzerland-and-pryv-join-forces-to-give-life-sciences-customers-a-gdpr-proof-path-to-connected-health-applications/ https://pryv.github.io/www/2018/06/19/altran-switzerland-and-pryv-join-forces-to-give-life-sciences-customers-a-gdpr-proof-path-to-connected-health-applications/#respond Tue, 19 Jun 2018 08:32:55 +0000 /?p=4516 New partner alliance agreement set to benefit the connected health sector with smart, patient-centric medical devices meeting the highest levels of data safety, privacy and user empowerment. Lausanne, June. 15, 2018 — Pryv, the […]

The post Altran Switzerland and Pryv join forces to give Life sciences customers a GDPR-proof path to connected health applications appeared first on Pryv.

]]>
New partner alliance agreement set to benefit the connected health sector with smart, patient-centric medical devices meeting the highest levels of data safety, privacy and user empowerment.

Lausanne, June. 15, 2018 — Pryv, the leading provider of privacy and personal data management software, announces that it has signed a partnership agreement with Altran, the leader in Engineering and R&D services empowering the next generation of healthcare evolution.

This partnership puts the patients at the heart of MedTech innovation and protects their privacy complying the most stringent data regulations with Altran acting as an end-to-end R&D engineering partner developing smart, patient-centric and compliant medical devices. Pryv brings trust, transparency and control over the use of sensitive medical data.

“Medtech companies operate in one of world’s most regulated environments, and scrutiny and complexity are only increasing” says Andreas Kuhn, CTO at Altran Switzerland. “Pryv extends our regulatory expertise with a rigorous data protection capability that accelerate time to compliance and enable privacy-preserving design from the outset of product development”

Altran and Pryv teamed up to enable Riva Digital, a Swiss eHealth initiative tackling the problem of hypertension in Switzerland.

The initiative encourages citizens to maintain healthy lifestyle behaviors and instantly keep tab on their blood pressure level right from their smartphone.

The medical-grade monitoring app builds on a breakthrough optical blood pressure monitoring method from the Swiss Center for Electronics and Microtechnology (CSEM), App development and integration from Altran and rigorous privacy and personal data management capability from Pryv. 

Riva digital bets that one year from now 100,000 people will have demonstrably lowered their blood pressure.

Pryv helps organisations manage personal data from creation, to use, to sharing and enhanced rights such as portability and right-to-be-forgotten. Packaged for rapid integration, the software solution comes with a secure storage vault, encryption protocols, fine-grained consent management and comprehensive auditing capability that radically cut IT development costs and accelerate time-to-benefit while addressing most stringent data protection requirements.

Altran ranks as the undisputed global leader in Engineering and R&D services (ER&D), following its acquisition of Aricent. The company offers clients an unmatched value proposition to address their transformation and innovation needs. Altran works alongside its clients, from initial concept through industrialization, to invent the products and services of tomorrow. For over 30 years, the company has provided expertise in aerospace, automotive, defense, energy, finance, life sciences, railway and telecommunications The Altran Group generated revenues of €2.9 billion in 2017, with some 45,000 employees in more than 30 countries.

The post Altran Switzerland and Pryv join forces to give Life sciences customers a GDPR-proof path to connected health applications appeared first on Pryv.

]]>
https://pryv.github.io/www/2018/06/19/altran-switzerland-and-pryv-join-forces-to-give-life-sciences-customers-a-gdpr-proof-path-to-connected-health-applications/feed/ 0
Pryv Unleashes IoT Connectivity with High Throughput Data Ingestion https://pryv.github.io/www/2018/03/22/pryv-unleashes-iot-connectivity-with-high-throughput-data-ingestion/ https://pryv.github.io/www/2018/03/22/pryv-unleashes-iot-connectivity-with-high-throughput-data-ingestion/#respond Thu, 22 Mar 2018 13:01:46 +0000 https://pryv.github.io/www/?p=4291 Lausanne, 20 March 2018 – Pryv, the leading provider of privacy and personal data management solutions, announced today Pryv.io High Frequency, a new software release capable of ingesting high-throughput IoT data at scale and […]

The post Pryv Unleashes IoT Connectivity with High Throughput Data Ingestion appeared first on Pryv.

]]>
Lausanne, 20 March 2018 – Pryv, the leading provider of privacy and personal data management solutions, announced today Pryv.io High Frequency, a new software release capable of ingesting high-throughput IoT data at scale and with optimal storage density. The new release addresses growing customer demand for mission-critical healthcare services with many devices connected.

“One of the key challenges of IoT data streams is to handle high volumes of data with fast connectivity without compromising on security.” says Stephan Bachofen, VP Software at Biovotion AG. “Pryv’s high throughput data ingestion will allow medical trackers to cope with future large volumes of telemetry data overcoming surges with guaranteed low-latency at affordable costs.”

The Healthcare industry remains among the fastest to adopt the Internet of Things.

Integrating IoT features into medical devices greatly improves the quality and effectiveness of service, bringing especially high value for the elderly people, patients with chronic conditions, and those requiring constant supervision. According to market estimates, spending on the Healthcare IoT solutions will reach 1 trillion Swiss francs by 2025 and will set the stage for highly personalised, accessible and on-time Healthcare services for everyone. Organisations need to ensure that future data conduits are powerful enough to handle and process the predicted throughput and increase in telemetry data, yet stay flexible enough to react to changing business needs.

Pryv provides a future-proof, device-ready privacy management solution handling personal data thru its lifecycle. IoT data arrives in the form of a continuous telemetric stream, is rapidly ingested, processed for authorisation and then optimally compressed in Pryv’s personal data vault for sharing and analysis.

Pryv’s purpose-built API is designed to ingest different types of high frequency data streams concurrently and efficiently.

Benchmarks performed on the beta release show notable improvements in throughput and storage density. On moderate virtualised hardware (4 cores, 14 GB RAM, 5000 IOPS), Pryv.io High Frequency stores 100’000 measures per second at approximately one byte per measure. The new release uses several advanced data compression algorithms to optimise disk usage. With an average IoT device capturing 20 sensor values every second, a single 4 cores  Pryv.io machine is able to store the data produced by 2000  concurrent devices. In a standard deployment, multiple machines would be receiving the telemetric streams in parallel.

Pryv helps organisations manage personal data from creation, to use, to sharing, archival and deletion. The High Frequency release is appropriate for health applications that require near real-time experience such as in physiology monitoring, critical home care services or point-of-care diagnostic. Our adaptive privacy out-of-box solution comes integrated with a secure storage vault, fine-grained consent management and comprehensive auditing capability that radically accelerate time-to-benefit while addressing most stringent data protection requirements.

The post Pryv Unleashes IoT Connectivity with High Throughput Data Ingestion appeared first on Pryv.

]]>
https://pryv.github.io/www/2018/03/22/pryv-unleashes-iot-connectivity-with-high-throughput-data-ingestion/feed/ 0
Pryv joins The Pistoia Alliance to lower the barriers of adopting innovation in life sciences research and development https://pryv.github.io/www/2017/05/04/pryv-joins-the-pistoia-alliance/ Thu, 04 May 2017 09:43:30 +0000 /?p=3650 As a new member at Pistoia Alliance, Pryv joins with the mission to address the growing needs for improving the adoption of innovative technologies for patient and real-world data. Positioning itself as the next […]

The post Pryv joins The Pistoia Alliance to lower the barriers of adopting innovation in life sciences research and development appeared first on Pryv.

]]>
As a new member at Pistoia Alliance, Pryv joins with the mission to address the growing needs for improving the adoption of innovative technologies for patient and real-world data.

Positioning itself as the next industry standard for personal and real-world data standard, Pryv is looking forward to participating in the Pistoia Alliance Community to promote collaboration as many organisations would benefit significantly from industry-wide pre-competitive collaboration.

Still, one of the biggest challenges the industry has, is transforming the growing number of collected data sets into meaningful insights via developing and implementing machine and deep learning systems.

Pryv addresses this challenge by providing the industry with a technology solution that enables data collection and standardization, storage and distribution, while allowing different and multi-algorithms to be used to identify patterns and outcomes.

Used as a foundation of R&D products development, Pryv eHealth Middleware technology ensures fast access to data and its compliant usage cross-borders. Easy access to acquiring real-world data, designing real-world data platforms and delivering real-world evidence, while ensuring the data is managed properly: preserving data privacy and security first is the promise Pryv brings to the wider Life Science community.

Benefiting from the ready-to-be used Middleware solution of Pryv, Pharmaceutical and Life Science companies can focus now primarily on their research and deliver real benefits to patients while being sure the data management is done right under their control.

The blockchain technology Pryv developed, and implemented in its Middleware is used to validate data set genuineness through its full life-cycle and provide a data trail audit, while the unique data ontology allows for granular data distribution to each stakeholder respecting Ethical, Legal and Clinical Data Requirements.

About Pryv

Pryv is an independent Swiss SME founded in 2012 with the mission to promote, develop and implement Health IT patient-centric solutions across the healthcare industry.Pryv developed and sell licenses of a trusted Swiss-made and validated eHealth Data Middleware to empower Pharmas, Hospitals/ Clinics, Medtech, Digital Health, Insurances to build compliant, innovative and scalable data-driven eHealth products with confidence, reduced time and IT expenses while respecting complex Data Privacy Regulations.

About The Pistoia Alliance:

The Pistoia Alliance is a global, not-for-profit members’ organisation made up of life science companies, technology and service providers, publishers, and academic groups working to lower barriers to innovation in life science and healthcare R&D. It was conceived in 2007 and incorporated in 2009 by representatives of AstraZeneca, GSK, Novartis and Pfizer who met at a conference in Pistoia, Italy. Its projects transform R&D through pre-competitive collaboration. It overcomes common R&D obstacles by identifying the root causes, developing standards and best practices, sharing pre-competitive data and knowledge, and implementing technology pilots. There are currently over 80 member companies; members collaborate on projects that generate significant value for the worldwide life sciences R&D community, using the Pistoia Alliance’s proven framework for open innovation.

The post Pryv joins The Pistoia Alliance to lower the barriers of adopting innovation in life sciences research and development appeared first on Pryv.

]]>