Glossary of Terms

Term Definition for this study

Application Programming Interface

A concept in software technology referring to how multiple applications can interact with and obtain data from one another. APIs operate on an agreement of inputs and outputs. Cybersecurity Protecting networks, devices, and data from unauthorised access or criminal use and the practice of ensuring confidentiality, integrity, and availability of information.1 Data architecture Data architecture is composed of models, policies, rules or standards that govern which data is collected, and how it is stored, arranged, integrated, and put to use in data systems and in organisations. Data is usually one of several architecture domains that form the pillars of an enterprise architecture or solution architecture.2 Data confidentiality Data confidentiality deals with protecting against the disclosure of information by ensuring that the data is limited to those authorised or by representing the data in such a way that it is only accessible to those who possess some critical information (e.g. a key for decrypting).3 Data governance Data governance is the process of managing the availability, usability, integrity and security of the data in enterprise systems, based on internal data standards and policies that also control data usage. Effective data governance ensures that data is consistent and trustworthy and doesn’t get misused.4 Data management Data management is the implementation of policies and procedures that put organisations and institutions in control of their data regardless of where it resides.5

Data ownership

Data ownership is primarily a data governance process that details an organisation’s legal ownership of enterprise-wide data. A specific organisation or the data owner has the ability to create, edit, modify, share and restrict access to the data.

6

Data privacy

Data privacy deals with aspects of the control process around sharing data with third parties, how and where that data is stored, and the specific regulations that apply to those processes.7

Data protection Data protection is the process of safeguarding important data from corruption, compromise or loss. Data protection is often about protection of personal data. It assures that data is not corrupted, is accessible for authorised purposes only, and is in compliance with applicable legal or regulatory requirements. 8 Data quality assurance Describes routine measures to assure data quality for robust analysis and use. Generally assesses the data against the attributes of validity, reliability, precision, integrity and timeliness.9

Data security

Data security refers to protective digital privacy measures that are applied to prevent unauthorised access to computers, databases and websites. Data security also protects data from corruption.10

Data sharing The ability to share the same data resource with multiple applications or users. It implies that the data are stored in one or more servers in the network and that there is some software locking mechanism that prevents the same set of data from being changed by two people at the same time.11 Data sovereignty Data sovereignty refers to digital data that is subject to the laws of the country in which it is located. The increasing adoption of cloud data services and a perceived lack of security has led many countries to introduce new legislation that requires data to be kept within the

1 Retrieved from: What is Cybersecurity? | CISA 2 Retrieved from: http://www.learn.geekinterview.com/data-warehouse/data-architecture/what-is-data-architecture.html 3 Retrieved from: https://csrc.nist.gov/glossary/term/DATA_CONFIDENTIALITY 4 Retrieved from: What Is Data Governance and Why Does It Matter? (techtarget.com) 5 Retrieved from: www.techopedia.com/definition/29059/data-ownership 6 Retrieved from: www.techopedia.com/definition/29059/data-ownership 7 Retrieved from: www.snia.org/education/what-is-data-privacy 8 Retrieved from: What is Data Protection? | SNIA 9 Retrieved from: https://www.fsnnetwork.org/sites/default/files/Data_quality_%20assurance_short.pdf 10 Retrieved from: www.techopedia.com/definition/26464/data-security 11 Retrieved from: www.yourdictionary.com/data-sharing

Data-driven decisionmaking

country in which the customer resides.12 It can also to the practice of sharing data for additional research or investigations.13

This term describes a decision-making process which involves collecting data, extracting patterns and facts from that data, and utilising those facts to make inferences that influence decision-making. Data-driven decision making (or DDDM) is the process of making organisational decisions based on actual data rather than intuition or observation alone.14

Digital health (Sometimes called eHealth). The use of Information and Communication Technologies in the health sector to improve the flow and use of information in support of the delivery and management of healthcare services. It can also play an important role in strengthening health systems and public health, increasing equity in access to health services, and in working towards universal health coverage.15 Digital health governance Directing and coordinating digital health systems development, achieving consensus on policy, protecting individuals and groups and assuring oversight and accountability in the various aspects relating to use of information and communication technologies for health are all part of the digital health governance function at the national level.16 Electronic Health Record An Electronic Health Record (EHR) refers to a system that digitises all clinical health services and provides a longitudinal and holistic view of the patient health records.

Electronic Medical Record An Electronic Medical Record (EMR) is a digitised medical record system – generally narrower than an EHR and associated with vertical disease programmes.

17

Health management information system

The Health Management Information System (HMIS) is one of the six building blocks essential for health system strengthening. HMIS is a data collection system specifically designed to support planning, management, and decision making in health facilities and organisations.18

Information Communication Technology

Information Communication Technology (ICT) is the broader term for Information Technology (IT) and refers to the diverse set of technological tools and resources used to transmit, store, create, share or exchange information.19 Information governance Refers to the process of converting data or evidence into actionable information, . Information governance establishes policy, determines accountability for managing information, and ensures this strategic asset is used properly and protected. It covers the strategic, operational, regulatory, legal, risk, and environmental requirements for information.20 Innovation governance Effective innovation governance in the health sector aims to improve the focus, support, funds, vision, and resources for innovation. There is emphasis on increasing speed and decreasing time and costs, through structured communication, coordination, and collaboration that challenges the status quo, while protecting operations. Effective innovation governance means for constructively disrupting processes and improving operations, while managing risk to achieve better outcomes.21 Intellectual property Intellectual property (IP) refers to creations of the mind, such as inventions; literary and artistic works; designs; and symbols, names and images used in commerce. IP is protected in law by, for example, patents, copyright and trademarks, which enable people to earn recognition or financial benefit from what they invent or create.22

International Principles of Digital Development

The Principles for Digital Development are a set of nine guidelines for integrating best practices into technology-enabled development programs for international development and cooperation. They include: Design with the User. Understand the Existing Ecosystem. Design for Scale. Build for Sustainability. Be Data Driven. Use Open Standards, Open Data, Open Source, and Open Innovation. Reuse and Improve. Address Privacy & Security. They have been endorsed by over 200 organisations including BMGF.23

12 Retrieved from: https://www.snia.org/education/what-is-data-privacy 13 Retrieved from: https://en.wikipedia.org/wiki/Data_sharing 14 Retrieved from: https://www.northeastern.edu/graduate/blog/data-driven-decision-making/ 15 WHO. (2019). WHO guideline recommendations on digital interventions for health system strengthening. Geneva: WHO. 16 Retrieved from: https://www.who.int/ehealth/governance/en 17 Government of the Republic of Malawi. (2020). National Digital Health Strategy, 2020-2025. Lilongwe: Ministry of Health 18 Retrieved from: Health Management Information Systems (HMIS) — MEASURE Evaluation 19 Retrieved from: Information and Communication Technologies (ICT) | UNESCO UIS 20 Retrieved from: https://www.starbridgeadvisors.com/2020/07/13/digital-health-governance-in-a-digital-health-system/ 21 Adapted from: Digital Health – Governance in a Digital Health System – StarBridge Advisors 22 Retrieved from: What is Intellectual Property? (wipo.int) 23 Retrieved from: https://digitalprinciples.org

Interoperability Describes the ability of two or more information systems or components to exchange information based on standards, and to use the information that is exchanged. Interoperability enables different health information systems to work together in and across organisational boundaries to advance the health status of individuals and communities and the effective delivery of healthcare to them.24 Knowledge governance Knowledge governance is a means for deriving meaning from, managing, and securely and appropriately sharing information assets according to established principles and policies. It is often a fusion of information and contextualised experience. Sharing knowledge can improve the performance of the individual and an organisation – within a health system, effective and timely sharing of validated knowledge can improve and save lives.25

mHealth The use of mobile and wireless devices (cell phones, tablets, etc.) to improve health outcomes, health care services, and health research.26 National ICT policy A National ICT Policy is a policy put into place by governments and stakeholders who are committed to the process of bringing digital technology to all individuals and communities so that they can have access to information.27 National ICT Strategy A National ICT Strategy is an approach to create an information technology infrastructure capability for maximum, and sustainable value for a country and its institutions. An ICT is timebound. It is informed by the national policy context and is implemented through an ICT Strategic Plan which documents specific steps, deliverables, and timeline. It may be supported by legislation, regulations, national guidelines and standard operating procedures (SOPs).28

24 Retrieved from: https://www.healthdatacollaborative.org/fileadmin/uploads/hdc/Documents/Working_Groups/Digital_Health_Interoperability_Working _Group/HIS_Interoperabiity_Maturity_Toolkit_Users_Guide.pdf 25 Adapted from: https://www.starbridgeadvisors.com/2020/07/13/digital-health-governance-in-a-digital-health-system/ 26 Retrieved from: What is mHealth? How Is It Different from Telehealth? (careinnovations.com) 27 Retrieved from: What is National ICT Policy | IGI Global (igi-global.com) 28 Retrieved from: IT Strategy (Information Technology Strategy) - CIO Wiki (cio-wiki.org)