International legal regulation of the protection of personal medical data of a patient in cross-border medical insurance systems

Abstract

In the context of digitalization of healthcare and the growth of cross-border mobility of patients, the protection of personal medical data in international health insurance systems is becoming increasingly relevant. Leading international organizations such as WHO, OECD, and the European Union are developing global standards for digital healthcare management based on the principles of confidentiality, transparency, and legal compatibility. The purpose of the study is to identify international legal mechanisms for protecting patients’ medical data in cross-border insurance and to propose ways to adapt them to the legislation of Kazakhstan. The methodological framework includes comparative legal, institutional, and system-structural approaches. The empirical basis was formed by an analysis of key documents: supranational (GDPR, Council of Europe Convention No. 108+, EHDS draft) and Kazakhstani (Law “On Personal Data and their Protection”, Code “On Public Health and the Healthcare System”). The implementation of the provisions of Conventions No. 108+ and GDPR into national legislation, the creation of a separate supervisory authority for the circulation of medical personal information, as well as the conclusion of agreements on mutual recognition of medical information security standards within the EAEU are proposed as priority areas for legal modernization. The implementation of these measures will allow Kazakhstan to bring domestic law in line with international obligations and strengthen the regulatory framework for digital healthcare.