Security and privacy in e-health technologies: a scoping review of challenges and strategies in primary care


İŞCAN G., Çöme O.

Family Practice, cilt.43, sa.2, 2026 (SCI-Expanded, Scopus) identifier identifier identifier

  • Yayın Türü: Makale / Derleme
  • Cilt numarası: 43 Sayı: 2
  • Basım Tarihi: 2026
  • Doi Numarası: 10.1093/fampra/cmag006
  • Dergi Adı: Family Practice
  • Derginin Tarandığı İndeksler: Science Citation Index Expanded (SCI-EXPANDED), Scopus, CINAHL, EMBASE, MEDLINE, Psycinfo
  • Anahtar Kelimeler: primary care, e-health technologies, privacy, cybersecurity, scoping review
  • Dokuz Eylül Üniversitesi Adresli: Evet

Özet

Background The rapid integration of e-health technologies—such as telehealth, mobile health (mHealth), and electronic health records—has transformed primary care delivery, especially during the COVID-19 pandemic. However, this transformation has revealed significant vulnerabilities in data privacy and security, particularly in decentralized and resource-limited primary care settings. This scoping review aims to map current evidence on privacy and security concerns related to e-health technologies in primary care and to identify mitigation strategies and research gaps. Methods A systematic search was conducted in PubMed, ACM, Scopus, and Web of Science for studies published between 2019 and 2024. Eligible studies addressed both privacy/security issues and e-health technology use in primary care. A two-stage screening process and full-text review were applied. Data were extracted and thematically synthesized. Results Fifty-two studies were included. E-health technologies examined included teleconsultations, patient portals, digital decision support tools, and artificial intelligence (AI)-based systems. Among included studies, telehealth accounted for 28%, mHealth and wearables 20%, electronic health records 16%, and AI applications 6%. Common concerns involved data breaches, insufficient encryption, lack of interoperability, consent ambiguity, and challenges in securing virtual consultations. Vulnerable groups—such as older adults and low-literacy populations—faced higher risks. Recommended strategies included privacy-by-design principles, secure infrastructure, user-centered design, clearer governance policies, provider training, and hybrid care models. Conclusion Addressing privacy and security in e-health requires more than technical solutions. Equitable, safe, and trustworthy systems must incorporate legal, ethical, and human-centered approaches. In primary care, privacy must be positioned as a core element of digital health equity, not an optional enhancement.