A comparative analysis: health data protection laws in Malaysia, Saudi Arabia and EU General Data Protection Regulation (GDPR)

被引:0
|
作者
Sarabdeen, Jawahitha [1 ]
Ishak, Mohamed Mazahir Mohamed [2 ]
机构
[1] Prince Sultan Univ, Coll Law, Riyadh, Saudi Arabia
[2] JS Law Firm, Pickering, ON, Canada
关键词
Privacy; Health data; Protection; Malaysia; Saudi Arabia; GDPR; ARTIFICIAL-INTELLIGENCE; DATA PRIVACY; EXTRATERRITORIALITY;
D O I
10.1108/IJLMA-01-2024-0025
中图分类号
D9 [法律]; DF [法律];
学科分类号
0301 ;
摘要
PurposeGeneral Data Protection Regulation (GDPR) of the European Union (EU) was passed to protect data privacy. Though the GDPR intended to address issues related to data privacy in the EU, it created an extra-territorial effect through Articles 3, 45 and 46. Extra-territorial effect refers to the application or the effect of local laws and regulations in another country. Lawmakers around the globe passed or intensified their efforts to pass laws to have personal data privacy covered so that they meet the adequacy requirement under Articles 45-46 of GDPR while providing comprehensive legislation locally. This study aims to analyze the Malaysian and Saudi Arabian legislation on health data privacy and their adequacy in meeting GDPR data privacy protection requirements.Design/methodology/approachThe research used a systematic literature review, legal content analysis and comparative analysis to critically analyze the health data protection in Malaysia and Saudi Arabia in comparison with GDPR and to see the adequacy of health data protection that could meet the requirement of EU data transfer requirement.FindingsThe finding suggested that the private sector is better regulated in Malaysia than the public sector. Saudi Arabia has some general laws to cover health data privacy in both public and private sector organizations until the newly passed data protection law is implemented in 2024. The finding also suggested that the Personal Data Protection Act 2010 of Malaysia and the Personal Data Protection Law 2022 of Saudi Arabia could be considered "adequate" under GDPR.Originality/valueThe research would be able to identify the key principles that could identify the adequacy of the laws about health data in Malaysia and Saudi Arabia as there is a dearth of literature in this area. This will help to propose suggestions to improve the laws concerning health data protection so that various stakeholders can benefit from it.
引用
收藏
页数:21
相关论文
共 50 条