AI Privacy and Security in Healthcare: A Systematic Literature Review.
Authors
Affiliations (7)
Affiliations (7)
- Health Informatics & Information Management Department, Texas State University, Round Rock, Texas, USA.
- Health Informatics and Health Information Management Program, School of Public Health, University of Washington, Seattle, Washington, USA.
- Department of Health Information Management, School of Health and Rehabilitation Sciences, University of Pittsburgh, Pittsburgh, Pennsylvania, USA.
- Charles Sturt University, Wagga Wagga, New South Wales, Australia.
- University of Mississippi Medical Center, Health Informatics and Information Management, Jackson, Mississippi, USA.
- School of Public and Population Health, Boise State University, Boise, Idaho, USA.
- McWilliams School of Biomedical Informatics, The University of Texas Health Science Center at Houston, Houston, Texas, USA.
Abstract
Artificial intelligence is expanding into telemedicine and telerehabilitation, yet significant privacy and security concerns persist. To synthesize empirical evidence on privacy and security approaches in health care, particularly those relevant to distributed home care. A systematic review identified 80 studies (2019 to 2025), and Latent Dirichlet Allocation (LDA) topic modeling characterized the privacy and security themes. Sixty-six studies addressed privacy, only seventeen addressed security, and three studies addressed both. LDA identified four themes: patient data privacy, federated learning for medical imaging, encrypted training and secure computation, and healthcare data governance. Most studies emphasized privacy-preserving approaches, like federated learning, encryption, and differential privacy. Almost half were conducted outside healthcare environments, limiting insight into real teleclinical and telerehabilitation workflow. Securing healthcare AI will require a multi-layered governance framework, broader global representation, and integration of privacy and security protections into routine clinical workflows.