Information processing device, method, and program

Abstract

This processor: receives an instruction indicating consent, non-consent, or withdrawal of consent by an individual for health data to be used by a business operator that uses health data of individuals; and if there is an instruction indicating withdrawal of consent from an individual with respect to health data for which consent to use has been given, derives a result of evaluating the response of the business operator regarding deletion of health data regarding the individual who has withdrawn consent, and presents the result of the evaluation to the individual.

Description

Information processing apparatus, method and program

[0001] The present disclosure relates to an information processing apparatus, a method, and a program.

[0002] Efforts are underway to realize a system that provides excellent services suited to an individual's health condition by using personal health and medical information, specifically health data which is data related to health, medical care, nursing care, etc. that records the individual's health and physical information. Health data also includes Personal Health Records (PHR), which are information related to an individual's health and medical care throughout their lifetime. For the use of health data, a business operator desiring to use health data is required to obtain the consent of the individual who is the subject of the health data. In addition, it is required to enable easy withdrawal of consent, and when a request for withdrawal of consent is made, the business operator must promptly delete the health data of the individual who made the request. Techniques for managing such use, consent, withdrawal of consent, etc. of health data have been proposed (see, for example, Patent Document 1 (Japanese Unexamined Patent Publication No. 2022-143911)).

[0003] An individual who is the subject of health data can withdraw consent at any time after responding to a consent request from a business operator handling health data. However, since the individual cannot know whether or not the business operator will promptly and reliably delete the health data in accordance with the withdrawal of consent, the individual cannot determine whether it is safe to trust the business operator seeking to use the health data. For this reason, there is a possibility that the individual may consent to the use of their health data by an untrusted business operator that will not delete the health data.

[0004] The present disclosure has been made in view of the above circumstances, and an object of the present disclosure is to enable determination of the reliability of a business operator that uses health data.

[0005] The information processing device disclosed herein includes a processor, which receives instructions from individuals to businesses that use their health data regarding consent to, refusal to, or withdrawal of consent for the use of their health data. If an individual instructs a business to withdraw consent for health data for which consent has been given, the processor derives an evaluation result of the business's response regarding the deletion of the health data for the individual who withdrew consent, and presents the evaluation result to the individual.

[0006] In the information processing device described herein, the processor may present the individual with the evaluation results of the business operator when the business operator instructs the individual to consent to or refuse to use the individual's health data.

[0007] In the information processing device provided by this disclosure, the evaluation results may include at least one of the response rate to requests for withdrawal of consent and the compliance rate to requests for withdrawal of consent.

[0008] In the information processing device described herein, the processor may present evaluation results for multiple businesses to individuals according to the content of the evaluation results.

[0009] In the information processing device described herein, the processor may present evaluation results for multiple businesses in order of the quality of the evaluation results.

[0010] In the information processing device described herein, the processor may present the best evaluation result among the evaluation results for multiple businesses, distinguishing it from the other evaluation results.

[0011] In the information processing device described herein, the processor may determine the usage fee for health data to the business operator based on the evaluation results.

[0012] In the information processing device described herein, the processor may further determine the usage fee according to the importance of the information contained in the health data.

[0013] The information processing method disclosed herein involves a computer receiving instructions from individuals to businesses that use their health data regarding consent to, refusal to, or withdrawal of consent for the use of their health data. If an individual requests to withdraw consent for health data for which consent has been given, the computer derives an evaluation result of the business's response regarding the deletion of the health data for the individual who withdrew consent, and presents the evaluation result to the individual.

[0014] The image processing program disclosed herein causes a computer to execute the following procedures: a procedure for receiving instructions from individuals to businesses that use their health data regarding their consent to, refusal to, or withdrawal of consent to the use of their health data; a procedure for deriving an evaluation result of the business's response to the deletion of the health data of an individual who has withdrawn their consent; and a procedure for presenting the evaluation result to the individual.

[0015] Furthermore, the technology disclosed herein may be applied to program products.

[0016] This disclosure allows for the assessment of the reliability of businesses that utilize health data.

[0017] Diagram showing the schematic configuration of a health data utilization system using the information processing device according to the embodiment of this disclosure Diagram showing the hardware configuration of the information processing device according to this embodiment Diagram showing the functional configuration of the information processing device according to this embodiment Diagram showing the health data usage request screen Flowchart showing the processing performed when an individual requests the use of their health data in this embodiment Flowchart showing the processing performed when an individual requests to withdraw consent Diagram showing another example of the health data usage request screen Diagram showing another example of the health data usage request screen Diagram showing another example of the health data usage request screen

[0018] Hereinafter, embodiments of this disclosure will be described with reference to the drawings. First, the configuration of a health data utilization system to which the information processing device according to this embodiment is applied will be described. Figure 1 is a diagram showing the schematic configuration of a health data utilization system. In the health data utilization system shown in Figure 1, a computer 1 containing the information processing device according to this embodiment, terminals 2 owned by each of several individuals, and terminals 3 owned by each of several businesses that utilize health data are connected via a network 4 in a state where they can communicate with each other.

[0019] Computer 1 is owned by the operator of the health data utilization system. Computer 1 contains the information processing device according to this embodiment, and the information processing program of this embodiment is installed on it. Computer 1 may be a workstation or a personal computer, or a server computer connected to them via a network. The information processing program is stored in a storage device of the server computer connected to the network, or in network storage, in a state that is accessible from the outside, and is downloaded and installed on Computer 1 used by the doctor upon request. Alternatively, it may be recorded on a recording medium such as a DVD (Digital Versatile Disc) or CD-ROM (Compact Disc Read Only Memory) and distributed, and then installed on Computer 1 from that recording medium.

[0020] Computer 1 is connected to a health database 5 containing personal health data via network 4. Computer 1 is also connected to an evaluation database 6 containing the evaluation results of businesses (described later) via network 4. The evaluation database 6 uses methods such as blockchain to register the evaluation results of businesses, making it difficult to tamper with.

[0021] Health data includes information related to an individual's health and medical care (health, medical, and care data that records an individual's health and physical information). Specifically, health data includes the results of an individual's health checkup, such as blood pressure, cholesterol levels, and liver function values, as well as medical history, height, and weight. Health data may also include personal health records, which are information related to an individual's health and medical care throughout their life. Because health data contains important personal information, it cannot be used freely, and businesses must obtain the consent of the individual who is the subject of the health data in order to use it.

[0022] In this embodiment, the business operator requests the operator of the health data utilization system to use an individual's health data. The operator of the health data utilization system asks the individual whether or not they consent to the business operator's use of their health data. If the individual consents to the use of their health data, they instruct the operator to consent to the use of their health data. The operator transmits the individual's health data to the business operator. As a result, the operator can use the health data to which consent has been given. On the other hand, if the individual does not consent to the use of their health data, they instruct the operator to not consent to the use of their health data. The operator notifies the business operator of this fact. In this case, the operator cannot use the individual's health data.

[0023] Furthermore, individuals may wish to withdraw their consent after giving it to a business for use. In this case, the individual will request the operator of the health data utilization system to withdraw the consent from the business. The health data utilization system will then send the request for withdrawal of consent to the business. Upon receiving a request for withdrawal of consent, the business must promptly delete the acquired health data in accordance with the law. The business will then notify the operator that the health data has been deleted.

[0024] In this embodiment, the above exchange takes place between computer 1, terminal 2, and terminal 3.

[0025] Terminal 2 is owned by the individual who is the subject of the health data. Examples of Terminal 2 include smartphones, tablet devices, and personal computers. Terminal 2 has an application installed that communicates with computer 1 to process information related to the handling of the individual's health data, such as giving instructions to consent to or refuse the use of health data as requested by the business operator, and requesting the withdrawal of consent. Terminal 2 exchanges information with computer 1 through this application.

[0026] Terminal 3 is owned by the business that uses the health data. Examples of Terminal 3 include smartphones, tablet devices, and personal computers. Terminal 3 has an application installed that communicates with computer 1 to perform processing related to the business's handling of health data, such as receiving requests for the use of personal health data, requests for withdrawal of consent, and notifications of processing results after deletion requests. Terminal 3 exchanges information with computer 1 through this application.

[0027] Next, an information processing device according to this embodiment will be described. Figure 2 is a diagram showing the hardware configuration of the information processing device according to this embodiment. As shown in Figure 2, the information processing device 10 includes a CPU (Central Processing Unit) 11, non-volatile storage 13, and memory 16 as a temporary storage area. The information processing device 10 also includes a display 14 such as a liquid crystal display, input devices 15 such as a keyboard and mouse, and a network interface 17 connected to a network 4. The CPU 11, storage 13, display 14, input devices 15, memory 16, and network interface 17 are connected to a bus 18. Note that the CPU 11 is an example of a processor in this disclosure.

[0028] The storage 13 is implemented by an HDD (Hard Disk Drive), SSD (Solid State Drive), or flash memory, etc. The information processing program 12 is stored in the storage 13 as a storage medium. The CPU 11 reads the information processing program 12 from the storage 13, expands it into memory 16, and executes the expanded information processing program 12.

[0029] Next, the functional configuration of the information processing device according to this embodiment will be described. Figure 3 is a diagram showing the functional configuration of the information processing device according to this embodiment. As shown in Figure 3, the information processing device 10 includes a first processing unit 21, a second processing unit 22, a derivation unit 23, and a management unit 24. The CPU 11 executes the information processing program 12, and the CPU 11 functions as the first processing unit 21, the second processing unit 22, the derivation unit 23, and the management unit 24.

[0030] The first processing unit 21 exchanges information with the individual's terminal 2 via the network interface 17. Specifically, when a business operator requests the use of health data, the first processing unit 21 sends a notification requesting consent to the individual's terminal 2, which is the subject of that health data, receives instructions for consent or non-consent from the individual's terminal 2, receives requests for withdrawal of consent, and sends the business operator's evaluation results regarding the deletion of health data (described later) to the terminal 2.

[0031] The second processing unit 21 exchanges information with the business operator's terminal 3 via the network interface 17. Specifically, it receives requests from the business operator for the use of health data, sends instructions to consent to or refuse to the use of the health data received from the individual's terminal 2, which is the subject of the health data, sends the health data to the business operator based on the consent, sends requests to withdraw consent to the business operator, and receives the results of the business operator's deletion of health data, as described later.

[0032] The derivation unit 23 derives an evaluation result of the business operator's response regarding the deletion of health data for an individual who has requested the withdrawal of consent for the use of their health data. In other words, an individual may have given consent to a business operator to use their health data, but later wish to withdraw that consent. In this case, the individual requests the operator to withdraw the use of their health data. The operator notifies the business operator that a request for withdrawal of consent has been received. The business operator deletes the health data for the individual who requested the withdrawal of consent and notifies the operator that the data has been deleted.

[0033] Businesses are legally required to promptly delete health data of individuals who request to withdraw their consent. However, there are cases where deletion is overlooked or takes a long time.

[0034] The derivation unit 23 stores in storage 13 the number of times consent has been withdrawn, the date and time when the consent withdrawal request was sent to the business, and the date and time when an instruction to delete health data was received from the business. Based on the number of times consent withdrawal requests have been made, the date and time when the consent withdrawal request was sent to the business, and the date and time when an instruction to delete health data was received from the business, the derivation unit 23 derives the compliance rate for consent withdrawal requests and the response rate for consent withdrawal requests as evaluation results. The derivation unit 23 registers the derived evaluation results in the evaluation database 6.

[0035] The derivation unit 23 counts the number x of health data deleted due to a request to withdraw consent for each business operator, and derives the compliance rate by dividing the counted number x by the number n of requests to withdraw consent. That is, the compliance rate S1 is derived by S1 = x / n. For example, if the number of requests to withdraw consent is 5 and the number of deleted data is 4, the compliance rate S1 will be 80%.

[0036] The derivation unit 23 derives the time Δt required to delete health data for each consent withdrawal request from the date and time t1 when the instruction to withdraw consent was sent to the business operator, and the date and time t2 when the instruction to delete health data was received from the business operator. The derivation unit 23 counts the number y of health data to be deleted for which the time Δt is within the legally stipulated deadline, and derives the response rate by dividing the counted number y by the number n of consent withdrawal requests. That is, the response rate S2 is derived by S2 = y / n. For example, if the number of consent withdrawal instructions is 5 and the number of deletions within the legally stipulated deadline is 3, the response rate S2 will be 60%.

[0037] The management unit 24 manages individual health data and evaluation results derived by the derivation unit 23. Specifically, the management unit 24 manages health data for each individual by registering the individual health data in the health database 5. It also manages evaluation results for each business by registering the evaluation results derived by the derivation unit 23 in the evaluation database 6.

[0038] Furthermore, when a business operator requests consent from an individual for the use of their health data, the management unit 24 displays to the individual's terminal 2 that such a request has been made, as well as the evaluation results regarding the business operator, including the business operator that made the request.

[0039] Figure 4 shows a screen displaying a request for use of health data on an individual's terminal 2. As shown in Figure 4, the consent request display screen 30 includes the name of the business operator (Company A) 31 that requested the use of health data, the compliance rate S1 for the deletion of health data, and the immediate response rate S2 for the deletion of health data. In addition to, or instead of, the name of the business operator 31, an icon that can identify the business operator may be displayed.

[0040] The display screen 30 shown in Figure 4 shows the text 32, "A request for use of your health data has been received. Do you consent?", a YES button 33, and a NO button 34. If an individual consents, they select the YES button 33; if they do not consent, they select the NO button 34. This sends the consent or non-consent information to the operator. The operator notifies the business operator of the consent or non-consent information. If consent is given, the operator sends the individual's health data to the business operator. This allows the business operator to use the personal data.

[0041] Furthermore, in this embodiment, the management unit 24 may determine the usage fee for health data to the business operator according to the evaluation results derived for the business operator. In this case, for example, the usage fee for health data to the business operator should be higher the lower the evaluation result, according to the following formula (1). Since business operators desire to use health data at a lower price, determining the usage fee in this way makes it possible to encourage business operators to delete health data more quickly and reliably when a request to withdraw usage is made. Usage fee = (Business operator's desired purchase price) / (Immediate response rate × Fulfillment rate) (1)

[0042] Furthermore, the management department 24 may determine the usage fee for the health data to the business operator according to the importance of the information contained in the individual's health data. Here, health data includes, for example, the results of an individual's health checkup. For multiple individuals, the values ​​for each item of the health checkup (e.g., blood pressure, blood sugar level, and cholesterol) follow an approximate normal distribution. In such normally distributed data, the less frequently the data occurs, the more valuable it is to the business operator.

[0043] In the present embodiment, for each item of health data, the management unit 24 obtains a normal distribution with a mean of 0 and a variance of 1, and derives the deviation value as a z-score. Then, for each item, the importance of the z-score is derived in five levels. For example, if the z-score is smaller than -1 or larger than 1, the importance is derived as 3. Further, if the z-score is not less than -1 and less than -0.5, or larger than 0.5 and not more than 1, the importance is derived as 2. If the z-score is larger than -0.5 and smaller than 0.5, the importance is derived as 1. In this way, the importance is derived such that the lower the occurrence rate of the health data is, the higher the importance becomes. Then, a representative value of the importance derived for all items (e.g., an average value, a median value, a maximum value, etc.) is derived as the importance of the individual's health data.

[0044] For example, when the importance levels of the items of systolic blood pressure, diastolic blood pressure, and body weight included in Mr. A's health data are 2, 1, and 1, the importance of Mr. A's health data is derived as 4 / 3 ≒ 1.3. The management unit 24 calculates the usage fee for the individual's health data according to the following formula (2) using the importance of the individual's health data. Usage fee = (desired purchase price of the business operator × importance of health data) / (response rate × performance rate) (2)

[0045] This makes it possible to determine the usage fee of the health data for the business operator such that the higher the importance of the health data is, the higher the usage fee becomes.

[0046] Next, processing performed in the present embodiment will be described. FIG. 5 is a flowchart showing processing performed when a request for use of an individual's health data is made in the present embodiment. First, a business operator makes a request for use of health data regarding a certain individual to an operator (step ST1). The second processing unit 22 of the operator's information processing apparatus 10 asks the individual, together with the evaluation result for the business operator, whether or not the individual consents to the use of the health data (step ST2).

[0047] Accordingly, a display screen including the evaluation result of the business operator is displayed on the terminal 2, and the evaluation result is presented to the individual (step ST3). The individual refers to the evaluation result to determine whether the business operator is worthy of trust, and issues an instruction of consent or non-consent to the operator (step ST4). The first processing unit 21 of the operator's information processing apparatus 10 receives the instruction of consent or non-consent, and when the individual consents to the use of health data, the second processing unit 22 transmits the individual's health data to the business operator (step ST5), and ends the process. When the individual does not consent to the use of health data, the second processing unit 22 notifies the business operator of the non-consent (step ST6), and ends the process.

[0048] Figure 6 is a flowchart showing processing performed when an individual makes a consent withdrawal request. First, the individual makes a request to withdraw the use of their own health data to the operator (step ST11). The second processing unit 22 of the operator's information processing apparatus 10 notifies the business operator that the withdrawal request has been received (step ST12). The business operator deletes the health data of the individual for whom the withdrawal request has been made (step ST13), and notifies the operator of the deletion (step ST14).

[0049] When the second processing unit 22 of the operator's information processing apparatus 10 receives the notification, it derives the fulfillment rate and response rate of health data deletion for the business operator (step ST15), registers the fulfillment rate and response rate as evaluation results in the evaluation database 6 (step ST16), and ends the process.

[0050] As described above, in the present embodiment, when an instruction to withdraw consent for health data is received from an individual, an evaluation result of the business operator's response regarding the deletion of health data of the individual who has withdrawn consent is derived, and the evaluation result is presented to the individual. Therefore, the individual can know the evaluation of the business operator regarding the deletion of health data.

[0051] In particular, when providing instructions to individuals regarding their consent or refusal to allow a business to use their personal health data, presenting the evaluation results to the individual allows them to use the evaluation results as a reference when deciding whether or not to consent to the business's use of their health data. Therefore, individuals can only consent to the use of their health data by highly-rated and trustworthy businesses.

[0052] In the above embodiment, the performance rate and the responsiveness rate are used as evaluation results, but the method is not limited to this. An evaluation result that reflects both the performance rate and the responsiveness rate may be derived. In this case, the evaluation result can be calculated using the performance rate S1 and the responsiveness rate S2 by the following formula (3). In formula (3), a and b are coefficients arbitrarily set by the operator. Evaluation result = (a × S1 + b × S2) / (a ​​+ b) × 100 (3)

[0053] Furthermore, in the above embodiment, when presenting the evaluation results to an individual, the evaluation results of multiple businesses may be presented. In this case, as shown in Figure 7, the evaluation results for multiple businesses (in this case, three) – Company A, Hospital B, and Pharmaceutical Company C – may be displayed in descending order of evaluation results. In Figure 7, the evaluation results are shown by the number of stars when the performance rate and response rate evaluation values ​​are divided into five levels.

[0054] Furthermore, as shown in Figure 8, the business with the highest evaluation result may be displayed separately from the other businesses. In Figure 8, the background color for Company A, which has the highest evaluation result, is different from that of the other businesses. Note that the different color is indicated in Figure 8 by the addition of hatching. Alternatively, as shown in Figure 9, the evaluation result display screen may be displayed with the color intensity gradually decreasing in order of highest evaluation result.

[0055] Furthermore, while the above embodiment uses the performance rate and response rate as evaluation results, it is not limited to these. The time Δt required to delete the health data may also be used as an evaluation result. In this case, the average time required to delete the health data for all deletion requests may be used as the evaluation result for the business operator. Alternatively, the number of consent agreements may be used as an evaluation result. The number of consent agreements is the number of cases in which a request for the use of health data was made and consent for its use was obtained.

[0056] In this embodiment, each process is executed on any computer. Furthermore, any computer may execute these processes using a processor as hardware, a program as software, or a combination thereof. In that case, the processor is configured to work in cooperation with the program to execute the various processes in this embodiment, and can function as a unit or means in this embodiment. Also, the execution order of the processes by the processor is not limited to the order described and may be changed as appropriate. Any computer may be a general-purpose computer, a computer designed for a specific purpose, a workstation, or any other system capable of executing each process.

[0057] A processor may consist of one or more hardware components, and the type of hardware is not limited. For example, a processor may consist of a CPU (Central Processing Unit), an MPU (Micro Processing Unit), a programmable logic device such as an FPGA (Field Programmable Gate Array), a dedicated circuit for executing a specific process such as an ASIC (Application Specific Integrated Circuit), a GPU (Graphic Processing Unit), or an NPU (Neural Processing Unit). Furthermore, the type of hardware may be a combination of different types of hardware. When multiple hardware components are configured to execute one or more processes of a processor, these multiple hardware components may reside in physically separate devices or in the same device. Also, in any embodiment, the order of each process performed by the processor is not limited to the order described above and may be changed as appropriate. Hardware is composed of electrical circuits (circuitry) that combine circuit elements such as semiconductor elements.

[0058] Furthermore, the program may be firmware or software such as microcode. Alternatively, the program may be, for example, a set of program modules, each function of which may be implemented by a processor configured to perform its respective function. The program may be program code or multiple code segments stored on one or more non-temporary computer-readable media (e.g., storage media or other storage). The program may be divided and stored on multiple non-temporary computer-readable media located in physically separate devices. Program code or code segments may represent any combination of procedures, functions, subprograms, routines, subroutines, modules, software packages, classes, or instructions, data structures, or program statements. Program code or code segments may be connected to other code segments or hardware circuits by sending and receiving information, data, arguments, parameters, or memory contents.

[0059] Furthermore, although the above embodiment describes a configuration in which the information processing program 12 is pre-stored (installed) in the storage 13, the invention is not limited to this configuration. The information processing program 12 may be provided in the form of a recording medium such as a CD-ROM (Compact Disc Read Only Memory), DVD-ROM (Digital Versatile Disc Read Only Memory), or USB (Universal Serial Bus) memory. Alternatively, the information processing program 12 may be provided in the form of a download from an external device via a network.

[0060] The technology disclosed herein extends to all program products. Program products include all forms of products for providing programs. For example, program products include programs provided via networks such as the Internet, and non-temporary computer-readable recording media such as CD-ROMs, DVDs, and USB memory devices on which programs are stored.

[0061] The following are additional provisions of this disclosure. (Additional Provision 1) An information processing device comprising a processor, wherein the processor receives instructions from an individual to a business operator that uses an individual's health data regarding consent to, refusal to, or withdrawal of consent to the use of the health data, and, if the individual has given an instruction to withdraw consent for health data for which consent has been given, the processor derives an evaluation result of the business operator's response regarding the deletion of the health data for the individual who has withdrawn consent, and presents the evaluation result to the individual. (Additional Provision 2) The information processing device according to Additional Provision 1, wherein the processor presents the evaluation result of the business operator to the individual when the individual gives instructions to the business operator regarding consent to or refusal to the use of the individual's health data. (Additional Provision 3) The information processing device according to Additional Provision 1 or 2, wherein the evaluation result includes at least one of the response rate to the request to withdraw consent and the compliance rate to the request to withdraw consent. (Addendum 4) The processor is an information processing device according to any one of Addendum 1 to 3, which presents the evaluation results for a plurality of businesses to the individual according to the content of the evaluation results. (Addendum 5) The processor is an information processing device according to Addendum 4, which presents the evaluation results for a plurality of businesses in order of the quality of the evaluation results. (Addendum 6) The processor is an information processing device according to Addendum 4, which presents the best evaluation result among the evaluation results for a plurality of businesses, distinguishing it from the other evaluation results. (Addendum 7) The processor is an information processing device according to any one of Addendum 1 to 6, which determines the usage fee for the health data to the business according to the evaluation results. (Addendum 8) The processor is an information processing device according to Addendum 7, which further determines the usage fee according to the importance of the information contained in the health data.(Note 9) An information processing method in which a computer receives instructions from an individual to a business that uses an individual's health data regarding consent to, refusal to, or withdrawal of consent to the use of the health data, and if the individual gives an instruction to withdraw consent for health data for which consent has been given, the computer derives an evaluation result of the business's response regarding the deletion of the health data for the individual who withdrew consent, and presents the evaluation result to the individual. (Note 10) An information processing program that causes a computer to execute a procedure for receiving instructions from an individual to a business that uses an individual's health data regarding consent to, refusal to, or withdrawal of consent to the use of the health data, if the individual gives an instruction to withdraw consent for health data for which consent has been given, an evaluation result of the business's response regarding the deletion of the health data for the individual who withdrew consent, and a procedure for presenting the evaluation result to the individual.

[0062] The disclosure of Japanese Patent Application No. 2025-038411, filed on 11 March 2025, is incorporated herein by reference in its entirety. All documents, patent applications, and technical standards described herein are incorporated herein by reference to the same extent as if each individual document, patent application, and technical standard were specifically and individually noted to be incorporated by reference.

Claims

1. An information processing device comprising a processor, wherein the processor receives instructions from an individual to a business operator that uses an individual's health data regarding consent to, refusal to, or withdrawal of consent to the use of the health data, and, if the individual gives an instruction to withdraw consent for health data for which consent has been given, the processor derives an evaluation result of the business operator's response regarding the deletion of the health data for the individual who withdrew consent, and presents the evaluation result to the individual.

2. The information processing apparatus according to claim 1, wherein the processor presents the evaluation results of the business operator to the individual when the individual gives instructions to the business operator to consent to or refuse to consent to the use of the individual's health data.

3. The information processing apparatus according to claim 1 or 2, wherein the evaluation result includes at least one of the response rate to the request to withdraw consent and the compliance rate to the request to withdraw consent.

4. The information processing apparatus according to claim 1 or 2, wherein the processor presents the evaluation results for a plurality of businesses to the individual according to the content of the evaluation results.

5. The information processing apparatus according to claim 4, wherein the processor presents the evaluation results for a plurality of businesses in order of the quality of the evaluation results.

6. The information processing apparatus according to claim 4, wherein the processor presents the best evaluation result among the evaluation results for a plurality of businesses, distinguishing it from other evaluation results.

7. The information processing apparatus according to claim 1 or 2, wherein the processor determines a usage fee for the health data to the business operator according to the evaluation result.

8. The information processing apparatus according to claim 7, wherein the processor further determines the usage fee according to the importance of the information contained in the health data.

9. An information processing method in which a computer receives instructions from an individual to a business that uses an individual's health data regarding consent to, refusal to, or withdrawal of consent to the use of that health data, and when the individual gives an instruction to withdraw consent for health data for which consent has been given, the computer derives an evaluation result of the business's response regarding the deletion of the health data for the individual who withdrew consent, and presents the evaluation result to the individual.

10. An information processing program that causes a computer to execute the following procedures for a business that uses an individual's health data: a procedure for receiving instructions from the individual regarding consent to, refusal to, or withdrawal of consent to the use of the health data; a procedure for deriving an evaluation result of the business's response regarding the deletion of the health data for an individual who has withdrawn consent, if the individual has instructed to withdraw consent for health data for which consent has been given; and a procedure for presenting the evaluation result to the individual.

Images