Section outline

  • Introduces cybersecurity, privacy laws, and ethical considerations.

    • Data Security, Privacy & Ethics Syllabus File

      Syllabus - ambitious, and we may not get to all of it, but let's try!

    • General Discussion Forum

      Here is a place for intros, reflections, any questions not directly related to given week's material, etc.

    • Week 1 - The threat outsiders underestimate Forum
      Due: Sunday, August 2, 2026, 11:59 PM

      Describe one threat to health data in your facility or program that an outside consultant would probably miss or underrate. Classify it using the modified STRIDE framework and say why it persists. Do not name your facility if the detail is sensitive.

      Not available unless: You belong to Digital Health Systems
    • Week 1 - Which failure is yours? Forum
      Due: Sunday, August 2, 2026, 11:59 PM

      Of the three documented incidents from this week (the BPJS Kesehatan breach, the NHLS exposure, and the DHIS2 deployment findings), which failure mode is most plausible in your own context, and what single condition makes it so?

      Not available unless: You belong to Digital Health Systems
    • Week 1 - One control that actually worked Forum
      Due: Sunday, August 2, 2026, 11:59 PM

      Share one low-cost security or data-handling control that genuinely worked in your setting: what it was, what it cost in money and staff time, and what made it stick. Replies should probe transferability, not politeness.

      Not available unless: You belong to Digital Health Systems
    • Week 2 - Your two legal layers Forum
      Due: Sunday, August 2, 2026, 11:59 PM

      Identify the data protection law and the cybercrime law that apply where you work, and state the breach or incident reporting clock under each. If you operate in Nigeria, reconcile the NDPA 72-hour notification with the Cybercrimes Act 72-hour sectoral CERT report: one incident, two clocks, whose job is each?
      Not available unless: You belong to Digital Health Systems
    • Week 2 - Defend it or replace it Forum
      Due: Sunday, August 2, 2026, 11:59 PM

      Take a position on the maternal referral WhatsApp group from the live session case: defend keeping it (with safeguards) or propose the replacement. Cite at least one specific statutory provision from any jurisdiction covered this week, and address what your position does to referral speed.
      Not available unless: You belong to Digital Health Systems
    • Week 2 - Where the gap bites Forum
      Due: Sunday, August 2, 2026, 11:59 PM

      The distance between what the law requires and what facilities can do is a theme of this module. Where does that gap bite hardest in your context, and is it a resources problem, a knowledge problem, or an incentives problem?
      Not available unless: You belong to Digital Health Systems
    • Week 3 - One CARE principle, one dataset Forum
      Due: Sunday, August 2, 2026, 12:00 AM

      Pick one dataset you manage or contribute to and apply one CARE principle to it (Collective benefit, Authority to control, Responsibility, or Ethics). What would change concretely if the principle were honored, and who would have to agree?
      Not available unless: You belong to Digital Health Systems
    • Week 3 - The donor asks for the data Forum
      Due: Sunday, August 2, 2026, 12:00 AM

      A funder makes record-level data export a condition of continued funding for your program. Draft the five-sentence response you would actually send. Replies should stress-test whether the response would survive contact with the funder.
      Not available unless: You belong to Digital Health Systems
    • Week 3 - Capstone stakeholder maps Forum
      Due: Sunday, August 2, 2026, 12:00 AM

      Post the stakeholder map for your Ethics Case Analysis: stakeholders, interests, power, and vulnerability. Give substantive comments on at least one peer map; the most useful comment names a stakeholder or an interest the author missed.

      Not available unless: You belong to Digital Health Systems
    • Final Capstone Reflection - What Transfers and What Does Not Forum

      So, in order to make it a bit smoother of a ride onto the next module, I'll go ahead and boil down grading/assessment requirements to this final reflection prompt. Please take your time and work through each section, giving it the care I hope this subject matter has elicited in all of you so far:


      1. Where a reading gave you language for something you already knew. Point to one idea, term, or framework from the readings that named something you have already seen in your own setting. Describe what you saw, and what the reading calls it.

      2. Where a reading does not fit your reality. Point to one place where a reading, a law, or a framework assumes conditions that do not exist where you work. Be specific about the assumption, and specific about the reality. This is the most useful thing you can write here.

      3. One thing you could change in 30 days. Name one change you could make without new budget, new staff, or new authority from above. Small is fine. Say who you would need to talk to first.

      Optional fourth: one question the readings left you with that you still cannot answer.

      Not available unless: You belong to Digital Health Systems
    • Data Security, Privacy, & Ethics Week 1 Lecture Notes File
    • Data Security, Privacy, & Ethics Week 2 Lecture Notes File
    • Data Security, Privacy & Ethics Week 3 Lecture Notes File