Towards better Diabetes Data Rights: Data protection, data ‘ownership’, and developing a patient charter

An important implication of the increasing availability and use of technologies to support care for people with diabetes is that huge quantities of data are now being generated about them on a routine basis. This has led to calls for people with diabetes to have greater access to and control over how 'their' health data are used. In this article, we analyse some of the legal challenges arising in this context. Focusing on the United Kingdom and European Union, we point to the lack of a clear legal framework to balance the different interests in the context of diabetes data, noting that calls for 'data ownership', while understandable, do not fit easily within existing legal frameworks and would not offer the kind of protections that some within the diabetes community are advocating for. We offer suggestions for supporting such calls. We first note the existing, but perhaps under-utilised, legal mechanisms available to people with diabetes over their data, such as data subject rights under the General Data Protection Regulation. Then, drawing inspiration from existing and emergent frameworks, we argue that the interests of people with diabetes could be bolstered by something like the Diabetes Data Rights Charter currently being co-developed by researchers and members of the diabetes community.