<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD Journal Publishing DTD v2.0 20040830//EN" "http://dtd.nlm.nih.gov/publishing/2.0/journalpublishing.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink" article-type="research-article" dtd-version="2.0">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher-id">JMI</journal-id>
      <journal-id journal-id-type="nlm-ta">JMIR Med Inform</journal-id>
      <journal-title>JMIR Medical Informatics</journal-title>
      <issn pub-type="epub">2291-9694</issn>
      <publisher>
        <publisher-name>Gunther Eysenbach</publisher-name>
        <publisher-loc>JMIR Publications Inc., Toronto, Canada</publisher-loc>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="publisher-id">v4i2e17</article-id>
      <article-id pub-id-type="pmid">27226391</article-id>
      <article-id pub-id-type="doi">10.2196/medinform.5401</article-id>
      <article-categories>
        <subj-group subj-group-type="heading">
          <subject>Original Paper</subject>
        </subj-group>
        <subj-group subj-group-type="article-type">
          <subject>Original Paper</subject>
        </subj-group>
      </article-categories>
      <title-group>
        <article-title>A Legal Framework to Support Development and Assessment of Digital Health Services</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="editor">
          <name>
            <surname>Eysenbach</surname>
            <given-names>Gunther</given-names>
          </name>
        </contrib>
      </contrib-group>
      <contrib-group>
        <contrib contrib-type="reviewer">
          <name>
            <surname>Graafland</surname>
            <given-names>Maurits</given-names>
          </name>
        </contrib>
        <contrib contrib-type="reviewer">
          <name>
            <surname>Hardesty</surname>
            <given-names>Chris</given-names>
          </name>
        </contrib>
      </contrib-group>
      <contrib-group>
        <contrib contrib-type="author" id="contrib1">
          <name name-style="western">
            <surname>Garell</surname>
            <given-names>Cecilia</given-names>
          </name>
          <degrees>MSc</degrees>
          <xref rid="aff1" ref-type="aff">1</xref>
          <ext-link ext-link-type="orcid">http://orcid.org/0000-0002-1982-5999</ext-link>
        </contrib>
        <contrib contrib-type="author" id="contrib2">
          <name name-style="western">
            <surname>Svedberg</surname>
            <given-names>Petra</given-names>
          </name>
          <degrees>RN, PhD</degrees>
          <xref rid="aff1" ref-type="aff">1</xref>
          <ext-link ext-link-type="orcid">http://orcid.org/0000-0003-4438-6673</ext-link>
        </contrib>
        <contrib contrib-type="author" id="contrib3" corresp="yes">
          <name name-style="western">
            <surname>Nygren</surname>
            <given-names>Jens M</given-names>
          </name>
          <degrees>MSc, PhD</degrees>
          <xref rid="aff1" ref-type="aff">1</xref>
          <address>
            <institution>School of Health and Welfare</institution>
            <institution>Halmstad University</institution>
            <addr-line>Box 823</addr-line>
            <addr-line>Halmstad, 30118</addr-line>
            <country>Sweden</country>
            <phone>46 35167863</phone>
            <fax>46 35167863</fax>
            <email>jens.nygren@hh.se</email>
          </address>
          <ext-link ext-link-type="orcid">http://orcid.org/0000-0002-3576-2393</ext-link>
        </contrib>
      </contrib-group>
      <aff id="aff1">
        <sup>1</sup>
        <institution>School of Health and Welfare</institution>
        <institution>Halmstad University</institution>
        <addr-line>Halmstad</addr-line>
        <country>Sweden</country>
      </aff>
      <author-notes>
        <corresp>Corresponding Author: Jens M Nygren 
        <email>jens.nygren@hh.se</email></corresp>
      </author-notes>
      <pub-date pub-type="collection"><season>Apr-Jun</season><year>2016</year></pub-date>
      <pub-date pub-type="epub">
        <day>25</day>
        <month>05</month>
        <year>2016</year>
      </pub-date>
      <volume>4</volume>
      <issue>2</issue>
      <elocation-id>e17</elocation-id>
      <!--history from ojs - api-xml-->
      <history>
        <date date-type="received">
          <day>2</day>
          <month>12</month>
          <year>2015</year>
        </date>
        <date date-type="rev-request">
          <day>14</day>
          <month>1</month>
          <year>2016</year>
        </date>
        <date date-type="rev-recd">
          <day>17</day>
          <month>2</month>
          <year>2016</year>
        </date>
        <date date-type="accepted">
          <day>18</day>
          <month>3</month>
          <year>2016</year>
        </date>
      </history>
      <!--(c) the authors - correct author names and publication date here if necessary. Date in form ', dd.mm.yyyy' after jmir.org-->
      <copyright-statement>©Cecilia Garell, Petra Svedberg, Jens M Nygren. Originally published in JMIR Medical Informatics (http://medinform.jmir.org), 25.05.2016.</copyright-statement>
      <copyright-year>2016</copyright-year>
      <license license-type="open-access" xlink:href="http://creativecommons.org/licenses/by/2.0/">
        <p>This is an open-access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/2.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work, first published in JMIR Medical Informatics, is properly cited. The complete bibliographic information, a link to the original publication on http://medinform.jmir.org/, as well as this copyright and license information must be included.</p>
      </license>
      <self-uri xlink:href="http://medinform.jmir.org/2016/2/e17/" xlink:type="simple"/>
      <abstract>
        <sec sec-type="background">
          <title>Background</title>
          <p>Digital health services empower people to track, manage, and improve their own health and quality of life while delivering a more personalized and precise health care, at a lower cost and with higher efficiency and availability. Essential for the use of digital health services is that the treatment of any personal data is compatible with the Patient Data Act, Personal Data Act, and other applicable privacy laws.</p>
        </sec>
        <sec sec-type="objective">
          <title>Objective</title>
          <p>The aim of this study was to develop a framework for legal challenges to support designers in development and assessment of digital health services.</p>
        </sec>
        <sec sec-type="methods">
          <title>Methods</title>
          <p>A purposive sampling, together with snowball recruitment, was used to identify stakeholders and information sources for organizing, extending, and prioritizing the different concepts, actors, and regulations in relation to digital health and health-promoting digital systems. The data were collected through structured interviewing and iteration, and 3 different cases were used for face validation of the framework.</p>
        </sec>
        <sec sec-type="results">
          <title>Results</title>
          <p>A framework for assessing the legal challenges in developing digital health services (Legal Challenges in Digital Health [LCDH] Framework) was created and consists of 6 key questions to be used to evaluate a digital health service according to current legislation.</p>
        </sec>
        <sec sec-type="conclusions">
          <title>Conclusions</title>
          <p>Structured discussion about legal challenges in relation to health-promoting digital services can be enabled by a constructive framework to investigate, assess, and verify the digital service according to current legislation. The LCDH Framework developed in this study proposes such a framework and can be used in prospective evaluation of the relationship of a potential health-promoting digital service with the existing laws and regulations</p>
        </sec>
      </abstract>
      <kwd-group>
        <kwd>digital health</kwd>
        <kwd>legal aspects</kwd>
        <kwd>technological innovations</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec sec-type="introduction">
      <title>Introduction</title>
      <p>Through the use of wireless devices, sensor technologies, the Internet, social networks, health information technology (IT), and personal health data, digital health services empower people to track, manage, and improve their own health and quality of life. At the same time, these services provide a more personalized and precise health care delivery, at a lower cost and with higher efficiency and availability [<xref ref-type="bibr" rid="ref1">1</xref>]. An emerging area at the intersection of informatics, health care, and business is electronic health (eHealth) [<xref ref-type="bibr" rid="ref2">2</xref>], which encompasses the mediation and interaction between health care and the individual via information and communication technology (ICT) [<xref ref-type="bibr" rid="ref3">3</xref>]. Although the extent of implementation and application of eHealth systems vary, the overall goal is the same: using ICT to provide better care more efficiently at a lower cost [<xref ref-type="bibr" rid="ref4">4</xref>]. Mobile health (mHealth), as a component of eHealth, involves the use and capitalization on mobile devices [<xref ref-type="bibr" rid="ref5">5</xref>] and encompasses any use of mobile technology to address health care challenges such as access, quality, affordability, matching of resources, and behavioral norms [<xref ref-type="bibr" rid="ref6">6</xref>]. The use of mHealth offers great opportunities by allowing asynchronous and remote care [<xref ref-type="bibr" rid="ref7">7</xref>] to an extensive number of potential users [<xref ref-type="bibr" rid="ref5">5</xref>]. Applications for mHealth serve a variety of functions: providing easy access to medical information about the symptoms and treatment of various diseases or allowing patients to track clinical measurements that can be sent to the care provider [<xref ref-type="bibr" rid="ref6">6</xref>]. These applications could change the nature of health care [<xref ref-type="bibr" rid="ref8">8</xref>] by using technology to increase patient engagement, improve care quality, transform care processes [<xref ref-type="bibr" rid="ref6">6</xref>], reduce health care costs, and minimize human error [<xref ref-type="bibr" rid="ref9">9</xref>].</p>
      <p>Essential for the use of all digital health services is that the treatment of any personal data is compatible with the Patient Data Act, Personal Data Act, and other applicable privacy laws. The European Commission has declared its intention to drive greater legal certainty in the digital health domain, and through the Directive 2011/24/European Union (EU), for the first time, it has placed eHealth in a legal context, requiring member states to cooperate with interoperability standards to allow full use of eHealth services across EU borders [<xref ref-type="bibr" rid="ref10">10</xref>]. Although some significant steps have been taken toward attaining this goal, the questions of liability for eHealth goods and services are still not fully addressed on EU level legislation. The lack of a fully worked out EU level framework illustrates the difficulties in pinpointing key concepts in relation to this rapidly evolving market. In response to this, the eHealth Authority was formed in Sweden in 2014 with responsibility for registries and the heterogeneity and variety of IT functions developed within Swedish health care.</p>
      <p>While the authorities investigate and consider the technological capabilities of eHealth services in the intersection of health care quality, patient safety, ethics and legal matters, new IT services, and mobile applications are advancing dramatically. The focus for the regulatory authorities should be to streamline the regulatory processes and promote innovation [<xref ref-type="bibr" rid="ref11">11</xref>], but because regulation and legislation are still behind, governmental authorities are forced to handle many issues in this domain case by case [<xref ref-type="bibr" rid="ref10">10</xref>]. This implicates that designers of digital health services need to acquire knowledge about relevant regulation and legislation and how to relate to and act on such regulation [<xref ref-type="bibr" rid="ref12">12</xref>]. A legal framework that could guide designers through these legal challenges, together with an understanding of the definitions of the concepts [<xref ref-type="bibr" rid="ref13">13</xref>], would both simplify and speed up development of digital health solutions [<xref ref-type="bibr" rid="ref14">14</xref>] and promote involvement of designers with experience from digital service design [<xref ref-type="bibr" rid="ref15">15</xref>] in the development of new digital health services. The aim of this study was to develop such a framework to support designers in development and assessment of digital health services.</p>
    </sec>
    <sec sec-type="methods">
      <title>Methods</title>
      <p>The study design was based on a stakeholder analysis approach for generating knowledge about actors to understand their intentions, interrelations, and interests and for assessing their influence on legal challenges in development of digital health services [<xref ref-type="bibr" rid="ref16">16</xref>]. Data obtained from interviews with relevant authorities and organizations together with information about concepts and regulations in relation to digital health services were analyzed and structured to create a framework for legal challenges.</p>
      <sec>
        <title>Case and Framing</title>
        <p>A framing of the questions about legal challenges and key concepts relevant to development of digital health services was discussed in the project group and with a consulting firm (Carmona AB) with expertise in the field of Web-based services and information solutions for handling of patient data and quality control. The consulting firm is in the forefront of developing such services in accordance with current legislation and in development of new practices and legislation. In this communication, we used data from our development of a digital service for play and interaction between children, aged 8-12 years, who have survived from childhood cancer treatment to frame legal challenges and key concepts [<xref ref-type="bibr" rid="ref17">17</xref>]. The case was described by a concept description [<xref ref-type="bibr" rid="ref18">18</xref>] and use experience descriptions through Persona characters and use scenarios [<xref ref-type="bibr" rid="ref19">19</xref>].</p>
        <p>On the basis of this, a basic understanding of the domain was formed, and a major law firm, with experience of legal issues in health care and a jurisconsult responsible for privacy and patient safety issues at the county council, was consulted with the intention to extend knowledge and our preunderstanding of the legal challenges and key concepts in this domain. A first draft was conceived, of a legal framework with relevant concepts, laws, and agencies or organizations involved in the care of the target group, or with regulatory or supervisory responsibility.</p>
      </sec>
      <sec>
        <title>Information Sources</title>
        <p>A purposive sampling [<xref ref-type="bibr" rid="ref20">20</xref>] was used to identify stakeholders and information sources for organizing, extending, and prioritizing the different components of the framework guided by the case. The first contacted stakeholders referred to other stakeholders, that is, a snowball recruitment [<xref ref-type="bibr" rid="ref21">21</xref>]. The information sources identified and used are listed in <xref ref-type="table" rid="table1">Table 1</xref>.</p>
        <table-wrap position="float" id="table1">
          <label>Table 1</label>
          <caption>
            <p>Identified actors, organizations, and authorities, and their area of expertise, to be considered in the following investigation.</p>
          </caption>
          <table width="584" border="0" cellpadding="7" cellspacing="0" rules="groups" frame="hsides">
            <col width="182"/>
            <col width="374"/>
            <thead>
              <tr valign="top">
                <td>Actor</td>
                <td>Area of expertise</td>
              </tr>
            </thead>
            <tbody>
              <tr valign="top">
                <td>The project group</td>
                <td>Researchers focused on development of digital health services for children using a participatory design where researchers collaborate with children from the target group.</td>
              </tr>
              <tr valign="top">
                <td>A local consulting firm</td>
                <td>Specialized in development of Web-based services and information solutions</td>
              </tr>
              <tr valign="top">
                <td>Data Inspection Authority</td>
                <td>Works to secure the individual’s right to integrity in society</td>
              </tr>
              <tr valign="top">
                <td>Inspection Authority for Health Care</td>
                <td>Supervises the activities in the social area and health care, as well as of health care professionals; the Authority is also responsible for certain permits.</td>
              </tr>
              <tr valign="top">
                <td>The National Board</td>
                <td>Works for all citizens’ equal access to good health and health care</td>
              </tr>
              <tr valign="top">
                <td>Ministry of Social Affairs</td>
                <td>The different disciplines within the overall responsibility: health care, health, social issues, social security features news about the government’s policy initiatives or decisions; they also contain current objectives and the government’s priorities in the field.</td>
              </tr>
              <tr valign="top">
                <td>County Council</td>
                <td>Responsible for many aspects of development in the county; the County Council has the mission to promote development and growth and to provide good health care.</td>
              </tr>
              <tr valign="top">
                <td>eHealth Authority</td>
                <td>Works with the development of national eHealth to contribute to better health care and health; the business is focused on creating participation for residents and providing support to practitioners and policy makers.</td>
              </tr>
              <tr valign="bottom">
                <td>European Commission</td>
                <td>Represents interests of the EU<sup>a</sup>; the commission proposes new legislation to Parliament and the Council of Ministers and ensures that EU countries apply EU law correctly.</td>
              </tr>
              <tr valign="top">
                <td>Medical Products Agency</td>
                <td>Government agency under the Ministry of Social Affairs; it has the mandate to promote the Swedish public and animal health.</td>
              </tr>
            </tbody>
          </table>
          <table-wrap-foot>
            <fn id="table1fn1">
              <p><sup>a</sup>EU: European Union.</p>
            </fn>
          </table-wrap-foot>
        </table-wrap>
      </sec>
      <sec>
        <title>Data Collection</title>
        <p>Identified websites of organizations, authorities and different operators or actors, and functions were screened for information about concepts and regulations in relation to digital health services. Stakeholders were interviewed about their relationship to eHealth and digital health services (<xref ref-type="table" rid="table1">Table 1</xref>). Interviewees were representatives from the County Council Board on Coordination of Information Safety, The National Board, The Data Inspection Authority, eHealth Authority, and Inspection Authority for Health Care. Interviews were performed, with 1 person from each of the aforementioned organizations, over phone (approximately 30 minutes) and repeated if new questions appeared. The topics in the semistructured interview guide were as follows: (1) Relationship to digital health services; (2) the authority’s function, assignment, and work for digital health services; (3) regulations that govern the work; and finally (4) other relevant information sources we should approach. In cases where we wanted to get the data confirmed in writing, follow-up questions were sent by email to the respective informant.</p>
      </sec>
      <sec>
        <title>Data Analysis</title>
        <p>The meaning out of the data was made in a systematical way to discover the relevant concepts and relationships among the input [<xref ref-type="bibr" rid="ref22">22</xref>]. All data inputs, such as questions, concept descriptions, laws and regulations, and functions, were put on post-it notes by the main author and structured on different levels and in relation to each other, and an affinity diagram was formed and discussed between all authors. The insights gained were used as a starting point for a framework for assessing the legal challenges in developing health-promoting digital services. The framework was iteratively verified against the project group and stakeholders (the Data Inspection Authority and eHealth Authority) and finally validated against three cases of digital health services.</p>
      </sec>
    </sec>
    <sec sec-type="results">
      <title>Results</title>
      <sec>
        <title>Identification of Concepts and Regulations</title>
        <p>The identified concepts to consider in this domain are: medical device, eHealth, medical responsibility, care damage, personal data, and consent. The concepts, their definitions, and relevant regulations identified during data collection and the subsequent analysis are listed in <xref ref-type="table" rid="table2">Table 2</xref>. Concepts and regulations that were identified during data collection but were not found to be relevant for framing of legal challenges from the perspective of development of digital health services are not included in this compilation, such as: health care quality registries, the law on drug lists, and the regulations of The National Board of Health and Welfare.</p>
        <table-wrap position="float" id="table2">
          <label>Table 2</label>
          <caption>
            <p>The Legal Challenges in Digital Health (LCDH) Framework for exploring a prospective health promoting digital service’s relationship to valid regulations.</p>
          </caption>
          <table width="948" border="0" cellpadding="7" cellspacing="0" rules="groups" frame="hsides">
            <col width="25"/>
            <col width="80"/>
            <col width="150"/>
            <col width="171"/>
            <col width="132"/>
            <col width="147"/>
            <col width="100"/>
            <thead>
              <tr valign="top">
                <td>#</td>
                <td>Concept</td>
                <td>Definition</td>
                <td>Question</td>
                <td>The following is valid for “yes”</td>
                <td>The following is valid for “no”</td>
                <td>Regulation</td>
              </tr>
            </thead>
            <tbody>
              <tr valign="top">
                <td>1</td>
                <td>Medical device</td>
                <td>A product is a medical device if it has a medical purpose as to: <break/>- Prove, prevent, monitor, treat, or mitigate a disease. <break/>- Prove, monitor, treat, mitigate, or compensate an injury or disability. <break/>- Examine, change, or replace anatomy or a physiological process. <break/>- Control fertilization.</td>
                <td>Is the product a medical device?</td>
                <td>The manufacturer must handle security aspects. <break/>Medical Products Agency is responsible for supervision of products and manufacturers. <break/>Inspection Authority for Health Care audits healthcare usage. <break/> <break/> <break/> <italic>Proceed to No. 2.</italic></td>
                <td>The manufacturer cannot claim anything, which is covered by the definition of a medical device, for example, that the product may mitigate a disease. <break/> <break/> <break/> <italic>Proceed to No. 2.</italic></td>
                <td>The law of medical devices (SFS<sup>a</sup>1993:584). <break/>Council Directive 93/42/EEC<sup>b</sup>concerning medical devices.</td>
              </tr>
              <tr valign="top">
                <td>2</td>
                <td>eHealth</td>
                <td>An eHealth service has a purpose to: <break/>- Mediate health service or information and interaction between health care and an individual. <break/>- Mediate information exchange between patients and health care professionals, hospitals, and other professionals within health care and networks for health information and telemedicine. <break/>- Use ICT<sup>c</sup>to improve the preventive work, diagnoses, health care, monitoring, or administration.</td>
                <td>Is the product an eHealth service?</td>
                <td><italic>Proceed to No. 4.</italic></td>
                <td><italic>Proceed to No. 3.</italic></td>
                <td>The Health Care Act (SFS 1982:763).</td>
              </tr>
              <tr valign="top">
                <td>3</td>
                <td>Medical responsibility</td>
                <td>Usually referred to health professionals' medical professional liability in the care and treatment of a patient and the medical responsibility in a comprehensive organizational plan.</td>
                <td>Is the service recommended/supplied by the health care? <break/>The health care recommends a service if they encourage or call for usage. It is not enough to only inform that the service is available.</td>
                <td>The health care vouches for the safety and security of the technology and that the risk of care damage is low. The service is examined and evaluated by a number of criteria. <break/> <break/> <break/> <italic>Proceed to No. 4.</italic></td>
                <td>The health care has no responsibility. <break/> <break/> <break/> <italic>Proceed to No. 5.</italic></td>
                <td>The Health Care Act (SFS 1982:763).</td>
              </tr>
              <tr valign="top">
                <td>4</td>
                <td>Care damage</td>
                <td>A damage that could have been avoided if adequate arrangements were taken in contact with health care. <break/>If medical device or eHealth service: <break/>The risk of care damage is determined by the level of care, the vulnerability of the target group, and how the usage is being monitored or followed up by the health care.</td>
                <td>Is there any risk of care damage?</td>
                <td>If the service provides monitoring/data logs that register threshold values or personal controls to prevent care damage, the responsibility of the health care is restricted. <break/>If no monitoring, the health care is responsible for preventing formation of care damage. <break/> <break/> <break/> <italic>Proceed to No. 5.</italic></td>
                <td>The healthcare has no responsibility. <break/> <break/> <break/> <italic>Proceed to No. 5.</italic></td>
                <td>Patient Safety Act (SFS 2010:659).</td>
              </tr>
              <tr valign="top">
                <td>5</td>
                <td>Personal data</td>
                <td>Definition personal data: <break/>All information that can directly or indirectly be assigned to a physical person who is alive. <break/>Definition handling of personal data: <break/>Every action or series of actions taken regarding personal data (automatically or not). For example, collection, registration, usage, storage, organization, processing, and distribution.</td>
                <td>Are personal data handled?</td>
                <td><italic>Proceed to No. 6.</italic></td>
                <td>To completely stay out of Privacy Act, the outcome measures of the patients must be anonymized. The health care has no responsibility.</td>
                <td>Privacy Act (SFS 1998:204). <break/>Patient Data Act (SFS 2008:355).</td>
              </tr>
              <tr valign="top">
                <td>6</td>
                <td>Consent</td>
                <td>Consent is defined as any freely given specific and unambiguous expression by which the registered person, after receiving information, accepts handling of personal data relating to him or her.</td>
                <td>Does the service lack user agreement? <break/>An agreement in which the purpose with the service, privacy, terms of use, responsibilities, and similar are regulated.</td>
                <td>The responsibility of the health care should be investigated/examined.</td>
                <td>A responsibility agreement signed by adult or parent/advocate may disclaim the health care from responsibility.</td>
                <td>Privacy Act (SFS 1998:204).</td>
              </tr>
            </tbody>
          </table>
          <table-wrap-foot>
            <fn id="table2fn1">
              <p><sup>a</sup>SFS: Swedish Code of Statutes</p>
            </fn>
            <fn id="table2fn2">
              <p><sup>b</sup>EEC: European Economic Community</p>
            </fn>
            <fn id="table2fn3">
              <p><sup>c</sup>ICT: information and communications technology</p>
            </fn>
          </table-wrap-foot>
        </table-wrap>
      </sec>
      <sec>
        <title>Structure of Concepts and Regulations Into a Framework</title>
        <p>On the basis of the identified concepts, regulations, and stakeholders, we designed a framework for assessing the legal challenges in developing digital health services (Legal Challenges in Digital Health [LCDH] Framework) consisting of 6 key questions to be used in prospective evaluation of the relationship of a digital health service to existing laws and regulations (<xref ref-type="table" rid="table2">Table 2</xref>). The questions are sequentially arranged so that affirmative responses gradually delineate which parts of the law apply to a certain digital health service. Negative responses to the same questions show which laws and regulations that each service is exempt from.</p>
      </sec>
      <sec>
        <title>Validation of the Framework</title>
        <p>The accuracy and quality of the LCDH Framework were assessed by the Swedish Data Inspection Authority and eHealth Authority and, finally, by the consulting firm, the law firm, and the jurisconsult involved in the framing of the data collection. The reviewed and iteratively revised framework was confirmed to be in accordance with current regulation, law and practice, and experience of these stakeholders. Because the stakeholders, during data collection, did not identify additional stakeholders or sources of information than those already included in our dataset (which means that saturation was achieved), the quality assessment of our framework indicated that it was valid and in line with current law and practice.</p>
        <p>To assess the usability, and hence the face validity, for using the framework for development and assessment of products and services, we applied the framework for evaluation of the legal challenges in 3 cases entailing development of digital health services. The questions in the framework (<xref ref-type="table" rid="table2">Table 2</xref>) were used to systematically evaluate and frame the legal challenges for the development and implementation of the digital services, <italic>Give Me a Break</italic>, <italic>Sisom</italic> and <italic>DELTA</italic> (<xref ref-type="app" rid="app1">Multimedia Appendix 1</xref>).</p>
        <sec>
          <title>Is the Product a Medical Device?</title>
          <p>A medical device is a product with a medical purpose; as to prove, prevent, monitor, treat or mitigate a disease, and to prove, monitor, treat, mitigate, or compensate an injury or disabilities (<xref ref-type="table" rid="table2">Table 2</xref>). The 3 digital services <italic>Give Me a Break</italic>, <italic>Sisom</italic>, and <italic>DELTA</italic>, were developed to facilitate child peer support, communication between children and their care providers, and adolescent’s participation in schools related to their health, respectively. None of the services has medical functions such as handling, treating, or preventing disease or illness and should therefore, according to the definitions outlined in <xref ref-type="table" rid="table2">Table 2</xref> , not be considered as medical devices.</p>
        </sec>
        <sec>
          <title>Is the Product an eHealth Service?</title>
          <p>An eHealth service mediates health information or service or interaction between health care and the individual (<xref ref-type="table" rid="table2">Table 2</xref>). The system owner and system administrator of each of the 3 services, as well as the support and maintenance from the operation manager who is responsible for all data, will be independent from health care providers and schools. In one case though, <italic>Sisom</italic>, the services by the health care providers will be mediated through the digital service and information about the users' personal data will be shared with the health care providers. This service should therefore be considered as an eHealth service. The other 2 services, <italic>Give Me a Break</italic>  and  <italic>DELTA</italic>, do not mediate any communication of personal data or sensitive interaction at all between health care providers and users and should therefore not be considered as tools or services that use ICT to improve the preventive work, diagnoses, health-care monitoring, or administration and hence therefore not be defined as eHealth services.</p>
        </sec>
        <sec>
          <title>Is the Service Recommended/Supplied by the Health Care?</title>
          <p>Two of the services, <italic>Sisom</italic>  and <italic>DELTA</italic>, are recommended and supplied by the health care services who therefore have medical responsibility for the usage of the services and any potential consequences of usage. This responsibility is independent of whether the services are to be considered as eHealth services. The other service, <italic>Give Me a Break</italic>, is neither part of regular treatment nor used to improve health care according to the definition of an eHealth service. It is neither recommended nor supplied by the health care, and there is therefore no medical responsibility for the activities or the consequences of the interaction on the service that can be imposed on the health care providers.</p>
        </sec>
        <sec>
          <title>Is There Any Risk of Care Damage?</title>
          <p>According to the definition in <xref ref-type="table" rid="table2">Table 2</xref> , care damage is a damage that could have been avoided if adequate measures were taken by health care. The 2 services recommended and supplied by the health care, <italic>Sisom</italic> and <italic>DELTA</italic>, are not associated with medical treatment but involve sharing of potentially sensitive personal information. Although the risk of care damage is limited to sharing of personal information, this entails privacy risks for which the health care is responsible. To prevent this, there is no follow-up or surveillance system in the services that automatically transfers personal information or use data to the health care. To protect the users, the services has well-ordered procedures for registration and login. All information transfers are performed by web encryption technology, and professionally trained personnel monitor all real-time activities and use logs. Moreover, in <italic>DELTA</italic>, abuse or misconduct can be reported by the users to be handled by the involved school personnel. Both systems thus have significant infrastructure for monitoring safety and security of the users without interfering with their integrity. For the other service, <italic>Give Me a Break</italic>, the health care will not have any medical responsibility, as it neither has a medical purpose nor is seen as health care or treatment. Consequently, although problems can arise, there can be no care damage per se.</p>
        </sec>
        <sec>
          <title>Are Personal Data/Personal Information Handled?</title>
          <p>Personal data are handled in all the 3 services and in some cases, such information is of sensitive nature as it relates to health and is coupled to the users identity through a personal code number, name, or photo. In <italic>Sisom</italic>, health care handles sensitive personal data coupled to health and the users' identity. In <italic>Give Me a break</italic> and <italic>DELTA</italic>, the personal data are however not of sensitive nature (not coupled to sensitive information about the users) but deal with their identities and therefore still must be handled with care. In all the 3 services, the users provide all data added into and shared in the system, and the users are the sole owners of the information that they share. In <italic>Give Me a Break</italic>, the personal and shared user profile is stored but can be deleted by the users themselves if they decide to no longer make it available to others on the service. The provider of each of the 3 services has complete responsibility for all personal data stored or shared. This includes responsibility to: inform about the purpose and use of the service; not publish or share sensitive personal data, if applicable, regularly monitor posts to discover offensive personal data; and promptly remove any offensive personal data.</p>
        </sec>
        <sec>
          <title>Does the Service Lack User Agreement?</title>
          <p>At registration and the first logon to all the 3 services, the users and their parents must approve an agreement in which the purpose of the service is outlined. The user agreement regulates privacy issues, terms of use, and responsibilities. Specifically, they state to what extent and how the services are a part of the user’s health care. For <italic>Give Me a Break</italic>, the user agreement also states that all use takes place on the users' own initiative and under own responsibility.</p>
        </sec>
      </sec>
    </sec>
    <sec sec-type="discussion">
      <title>Discussion</title>
      <p>The aim of this study was to develop a framework for legal challenges to support designers in development and assessment of digital health services. The LCDH Framework presented herein was created based on concepts and regulations identified through interviews with authority representatives, and a process of stakeholder review and iterative revision of the developed framework confirmed that it was in accordance with current regulation, legislation, and practice. Usability evaluation against real cases of digital health services revealed how the definitions in the framework feasibly guided identification of distinctive and appropriate regulation to be considered and legal challenges to relate to given the nature of each of the evaluated services.</p>
      <p>The work of government regulation and legislation of digital health services have not so far kept pace with the digital development. Digital health services in various forms are under rapid development and are involving several stakeholders and actors. Game and app developers, for instance, with innovative ideas for digital health may experience obstacles in implementation of digital health services in the interface between health care and individuals [<xref ref-type="bibr" rid="ref23">23</xref>]. One problem can in many cases be the indistinct legislation.</p>
      <p>This slow and perhaps circumspect legislation under construction may cause difficulties to developers of digital health services to acquire knowledge about relevant regulation and how to relate to and act on the regulation. Implications of this can be: (1) inaccuracies due to misinterpretations and (2) omitted development of digital health services owing to complexity in understanding the regulations. It would be desirable in the future that this type of regulation and legislation would be prepared in cooperation between the authorities, the developers, and the health care experts [<xref ref-type="bibr" rid="ref12">12</xref>]. However, until then, there is a need for a dynamic tool, a framework, guiding designers and developers through the legal challenges in development work in the digital health domain, together with an understanding of the definitions of the concepts [<xref ref-type="bibr" rid="ref13">13</xref>]. This is important both to simplify and speed up development of digital health solutions [<xref ref-type="bibr" rid="ref14">14</xref>] and to promote involvement of developers experienced in digital service design [<xref ref-type="bibr" rid="ref15">15</xref>]. There is a need for approaching and proceeding with legal challenges adjacent health care in the design development to facilitate the forthcoming implementation.</p>
      <p>The LCDH Framework presented in this article has the qualifications to be a useful tool in guiding designers and developers through the legal challenges in development work in the digital health domain. The framework: (1) considers the current regulation and legislation that apply in the EU; (2) presents the definitions of relevant legal concepts; (3) is verified by the Swedish Data Inspection Authority and eHealth Authority; and finally, (4) is easy to use. The framework merely aims to guide development by identifying legal dividing lines between different digital health services in their product design. It has no legal power to determine guidelines, and a jurisconsult may need to confirm the legal application in case of uncertainties. Although the concepts used in the framework are based on legislation in the EU, it can be used in other contexts to understand the legal challenges and the hierarchy of the various concepts governing legislation within the digital health domain.</p>
      <sec>
        <title>Strengths and Limitations</title>
        <p>As with all methods and studies used in research, certain limitations apply. The interviews were performed with 1 person from each organization or authority over the phone. Performing the interviews over phone was convenient and time-saving, and if the informants had text material to share, it was sent by email. Important information sources and stakeholders can be identified by using snowball recruitment [<xref ref-type="bibr" rid="ref21">21</xref>]; however, there is a risk that important informants are missed by this approach. In our study, it is likely that we through this approach identified relevant informants as both the Swedish Data Inspection Authority and the eHealth Authority verified our report. The mapping was performed during the spring and summer of 2014 in accordance with the regulations prevailing in Sweden. The definition of eHealth is however taken from the European Commission’s declaration of eHealth [<xref ref-type="bibr" rid="ref3">3</xref>].</p>
      </sec>
      <sec>
        <title>Conclusions</title>
        <p>Consideration toward ethical aspects is a requirement for both performing and publishing research in relation to health and human subjects. However, as long as such ethical aspects are taken into account, no requirements are placed on that, and research should also be aligned with legal challenges that are relevant to the context of the research.</p>
        <p>Structured discussion about legal challenges in relation to health-promoting digital services can be enabled by a constructive framework to investigate, assess, and verify the digital service according to current legislation. The LCDH Framework developed in this study proposes such a framework and can be used in prospective evaluation of the relationship of a potential health-promoting digital service to the existing laws and regulations. However, legislation regarding eHealth in general and health-promoting digital services in particular is under construction, and authorities’ judgments are made from case to case. Further research is critical to expanding the knowledge base of cases, or products, using health-promoting digital service implemented and where current legislation is applied.</p>
      </sec>
    </sec>
  </body>
  <back>
    <glossary>
      <title>Abbreviations</title>
      <def-list>
        <def-item>
          <term id="abb2">eHealth</term>
          <def>
            <p>Electronic health</p>
          </def>
        </def-item>
        <def-item>
          <term id="abb3">EU</term>
          <def>
            <p>European Union</p>
          </def>
        </def-item>
        <def-item>
          <term id="abb4">ICT</term>
          <def>
            <p>information and communications technology</p>
          </def>
        </def-item>
        <def-item>
          <term id="abb5">LCDH Framework</term>
          <def>
            <p>Legal Challenges in Digital Health Framework</p>
          </def>
        </def-item>
        <def-item>
          <term id="abb6">mHealth</term>
          <def>
            <p>mobile health</p>
          </def>
        </def-item>
      </def-list>
    </glossary>
    <ack>
      <p>The authors want to thank Gunnar Severinson for valuable guidance during project initiation and data analysis and Pontus Wärnestål for advice in the initial stages of data collection. The study was supported by grants from the Swedish Research Council, the Knowledge foundation, and the Regional Swedish Innovation Office West.</p>
    </ack>
    <fn-group>
      <fn fn-type="conflict">
        <p>None declared.</p>
      </fn>
    </fn-group>
    <ref-list>
      <ref id="ref1">
        <label>1</label>
        <nlm-citation citation-type="book">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Topol</surname>
              <given-names>Eric</given-names>
            </name>
          </person-group>
          <source>The Creative Destruction of Medicine: How the Digital Revolution Will Create Better Health Care</source>
          <year>2012</year>
          <publisher-loc>New York</publisher-loc>
          <publisher-name>Basic Books</publisher-name>
        </nlm-citation>
      </ref>
      <ref id="ref2">
        <label>2</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Eysenbach</surname>
              <given-names>G</given-names>
            </name>
          </person-group>
          <article-title>What is e-health?</article-title>
          <source>J Med Internet Res</source>
          <year>2001</year>
          <volume>3</volume>
          <issue>2</issue>
          <fpage>E20</fpage>
          <comment>
            <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="http://www.jmir.org/2001/2/e20/"/>
          </comment>
          <pub-id pub-id-type="doi">10.2196/jmir.3.2.e20</pub-id>
          <pub-id pub-id-type="medline">11720962</pub-id>
          <pub-id pub-id-type="pmcid">PMC1761894</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref3">
        <label>3</label>
        <nlm-citation citation-type="web">
          <person-group person-group-type="author">
            <collab>European Commission</collab>
          </person-group>
          <source>E-health</source>
          <access-date>2016-04-27</access-date>
          <comment>Public health 
          <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="http://ec.europa.eu/health/ehealth/policy/index_en.htm">http://ec.europa.eu/health/ehealth/policy/index_en.htm</ext-link>
          <ext-link ext-link-type="webcite" xlink:href="6h4nt2HdQ"/></comment>
        </nlm-citation>
      </ref>
      <ref id="ref4">
        <label>4</label>
        <nlm-citation citation-type="web">
          <person-group person-group-type="author">
            <collab>European Commission</collab>
          </person-group>
          <source>High tech for health</source>
          <year>2012</year>
          <month>06</month>
          <day>06</day>
          <access-date>2016-04-27</access-date>
          <comment>
            <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="https://ec.europa.eu/digital-single-market/en/news/high-tech-health">https://ec.europa.eu/digital-single-market/en/news/high-tech-health</ext-link>
            <ext-link ext-link-type="webcite" xlink:href="6h4o66dL1"/>
          </comment>
        </nlm-citation>
      </ref>
      <ref id="ref5">
        <label>5</label>
        <nlm-citation citation-type="book">
          <person-group person-group-type="author">
            <collab>World Health Organization</collab>
          </person-group>
          <source>mHealth: New Horizons for Health through Mobile Technologies: Second Global Survey on eHealth (Global Observatory for Ehealth)</source>
          <year>2011</year>
          <publisher-loc>Geneva, Switzerland</publisher-loc>
          <publisher-name>World Health Organization</publisher-name>
        </nlm-citation>
      </ref>
      <ref id="ref6">
        <label>6</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Schulke</surname>
              <given-names>DF</given-names>
            </name>
          </person-group>
          <article-title>The regulatory arms race: Mobile health applications and agency posturing</article-title>
          <source>Boston university law review</source>
          <year>2013</year>
          <issue>93</issue>
          <fpage>1699</fpage>
          <lpage>1752</lpage>
        </nlm-citation>
      </ref>
      <ref id="ref7">
        <label>7</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Kramer</surname>
              <given-names>GM</given-names>
            </name>
            <name name-style="western">
              <surname>Kinn</surname>
              <given-names>JT</given-names>
            </name>
            <name name-style="western">
              <surname>Mishkind</surname>
              <given-names>MC</given-names>
            </name>
          </person-group>
          <article-title>Legal, Regulatory, and Risk Management Issues in the Use of Technology to Deliver Mental Health Care</article-title>
          <source>Cognitive and Behavioral Practice</source>
          <year>2015</year>
          <month>08</month>
          <volume>22</volume>
          <issue>3</issue>
          <fpage>258</fpage>
          <lpage>268</lpage>
          <pub-id pub-id-type="doi">10.1016/j.cbpra.2014.04.008</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref8">
        <label>8</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Ferguson</surname>
              <given-names>B</given-names>
            </name>
          </person-group>
          <article-title>Editorial: The Emergence of Games for Health</article-title>
          <source>Games for Health Journal</source>
          <year>2012</year>
          <volume>1</volume>
          <issue>1</issue>
          <fpage>1</fpage>
          <lpage>2</lpage>
          <pub-id pub-id-type="doi">10.1089/g4h.2012.1010</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref9">
        <label>9</label>
        <nlm-citation citation-type="web">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Fellay</surname>
              <given-names>S</given-names>
            </name>
          </person-group>
          <source>American Enterprise Institute</source>
          <year>2014</year>
          <access-date>2016-04-28</access-date>
          <comment>Changing the rules of health care: Mobile health and challenges for regulation 
          <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="http://www.aei.org/publication/changing-the-rules-of-health-care-mobile-health-and-challenges-for-regulation/">http://www.aei.org/publication/changing-the-rules-of-health-care-mobile-health-and-challenges-for-regulation/</ext-link>
          <ext-link ext-link-type="webcite" xlink:href="6h6h4M6CC"/></comment>
        </nlm-citation>
      </ref>
      <ref id="ref10">
        <label>10</label>
        <nlm-citation citation-type="book">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Andoulsi</surname>
              <given-names>I</given-names>
            </name>
            <name name-style="western">
              <surname>Wilson</surname>
              <given-names>P</given-names>
            </name>
          </person-group>
          <person-group person-group-type="editor">
            <name name-style="western">
              <surname>George</surname>
              <given-names>C</given-names>
            </name>
            <name name-style="western">
              <surname>Whitehouse</surname>
              <given-names>D</given-names>
            </name>
            <name name-style="western">
              <surname>Duquenoy</surname>
              <given-names>P</given-names>
            </name>
          </person-group>
          <article-title>Understanding liability in eHealth: Towards greater clarity at European Union level</article-title>
          <source>eHealth: Legal, ethical and governance challenges</source>
          <year>2013</year>
          <publisher-loc>Heidelberg Berlin</publisher-loc>
          <publisher-name>Springer</publisher-name>
          <fpage>165</fpage>
          <lpage>180</lpage>
        </nlm-citation>
      </ref>
      <ref id="ref11">
        <label>11</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Vedder</surname>
              <given-names>A</given-names>
            </name>
            <name name-style="western">
              <surname>Cuijpers</surname>
              <given-names>C</given-names>
            </name>
            <name name-style="western">
              <surname>Vantsiouri</surname>
              <given-names>P</given-names>
            </name>
            <name name-style="western">
              <surname>Zuleta Ferrari</surname>
              <given-names>M</given-names>
            </name>
          </person-group>
          <article-title>The law as a ‘catalyst and facilitator’ for trust in e-health: challenges and opportunities</article-title>
          <source>Law, Innovation and Technology</source>
          <year>2014</year>
          <volume>6</volume>
          <issue>2</issue>
          <fpage>305</fpage>
          <lpage>325</lpage>
          <pub-id pub-id-type="doi">10.5235/17579961.6.2.305</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref12">
        <label>12</label>
        <nlm-citation citation-type="book">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Kolitsi</surname>
              <given-names>Z</given-names>
            </name>
            <name name-style="western">
              <surname>Thonnet</surname>
              <given-names>M</given-names>
            </name>
          </person-group>
          <person-group person-group-type="editor">
            <name name-style="western">
              <surname>Rosenmöller</surname>
              <given-names>M</given-names>
            </name>
            <name name-style="western">
              <surname>Whitehouse</surname>
              <given-names>D</given-names>
            </name>
            <name name-style="western">
              <surname>Wilson</surname>
              <given-names>P</given-names>
            </name>
          </person-group>
          <article-title>New directions in eHealth governance in Europe</article-title>
          <source>Managing eHealth: From vision to reality</source>
          <year>2014</year>
          <publisher-loc>Basingstoke, Hampshire, UK</publisher-loc>
          <publisher-name>Palgrave Macmillan</publisher-name>
          <fpage>50</fpage>
          <lpage>60</lpage>
        </nlm-citation>
      </ref>
      <ref id="ref13">
        <label>13</label>
        <nlm-citation citation-type="confproc">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Stroetmann</surname>
              <given-names>KA</given-names>
            </name>
          </person-group>
          <article-title>Scoping global good eHealth platforms: implications for sub-Saharan Africa</article-title>
          <year>2014</year>
          <conf-name>IST-Africa 2014 Conference</conf-name>
          <conf-date>May 06-09, 2014</conf-date>
          <conf-loc>Mauritius</conf-loc>
          <pub-id pub-id-type="doi">10.1109/ISTAFRICA.2014.6880601</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref14">
        <label>14</label>
        <nlm-citation citation-type="web">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Nilsson</surname>
              <given-names>C</given-names>
            </name>
          </person-group>
          <source>IT i vården</source>
          <year>2013</year>
          <month>12</month>
          <day>16</day>
          <access-date>2016-04-27</access-date>
          <comment>Gamification förnyar vården 
          <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="http://itivarden.idg.se/2.2898/1.539129/gamification-fornyar-varden">http://itivarden.idg.se/2.2898/1.539129/gamification-fornyar-varden</ext-link>
          <ext-link ext-link-type="webcite" xlink:href="6h4r0uie5"/></comment>
        </nlm-citation>
      </ref>
      <ref id="ref15">
        <label>15</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Brown-Johnson</surname>
              <given-names>CG</given-names>
            </name>
            <name name-style="western">
              <surname>Berrean</surname>
              <given-names>B</given-names>
            </name>
            <name name-style="western">
              <surname>Cataldo</surname>
              <given-names>JK</given-names>
            </name>
          </person-group>
          <article-title>Development and usability evaluation of the mHealth tool for lung cancer (mHealth TLC): A virtual world health game for lung cancer patients</article-title>
          <source>Patient Education and Counceling</source>
          <year>2015</year>
          <volume>98</volume>
          <issue>4</issue>
          <fpage>506</fpage>
          <lpage>511</lpage>
          <pub-id pub-id-type="doi">10.1016/j.pec.2014.12.006</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref16">
        <label>16</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Varvasovszky</surname>
              <given-names>Z</given-names>
            </name>
            <name name-style="western">
              <surname>Brugha</surname>
              <given-names>R</given-names>
            </name>
          </person-group>
          <article-title>How to do (or not to do)… A stakeholder analysis</article-title>
          <source>Health Policy and Planning</source>
          <year>2000</year>
          <month>09</month>
          <volume>15</volume>
          <issue>3</issue>
          <fpage>338</fpage>
          <lpage>345</lpage>
          <comment>
            <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="http://heapol.oxfordjournals.org/cgi/pmidlookup?view=long&#38;pmid=11012410"/>
          </comment>
          <pub-id pub-id-type="medline">11012410</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref17">
        <label>17</label>
        <nlm-citation citation-type="confproc">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Lindberg</surname>
              <given-names>S</given-names>
            </name>
            <name name-style="western">
              <surname>Wärnestål</surname>
              <given-names>P</given-names>
            </name>
            <name name-style="western">
              <surname>Nygren</surname>
              <given-names>J</given-names>
            </name>
            <name name-style="western">
              <surname>Svedberg</surname>
              <given-names>P</given-names>
            </name>
          </person-group>
          <article-title>Designing digital peer support for children: design patterns for social interaction</article-title>
          <year>2014</year>
          <conf-name>IDC'14 Proceedings of the 2014 conference on Interaction design and children</conf-name>
          <conf-date>June 17-20, 2014</conf-date>
          <conf-loc>Aarhus, Denmark</conf-loc>
          <publisher-loc>New York</publisher-loc>
          <publisher-name>ACM</publisher-name>
          <fpage>47</fpage>
          <lpage>56</lpage>
          <pub-id pub-id-type="doi">10.1145/2593968.2593972</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref18">
        <label>18</label>
        <nlm-citation citation-type="confproc">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Wärnestål</surname>
              <given-names>P</given-names>
            </name>
            <name name-style="western">
              <surname>Nygren</surname>
              <given-names>J</given-names>
            </name>
          </person-group>
          <article-title>Building an experience framework for a digital peer support service for children surviving from cancer</article-title>
          <year>2013</year>
          <conf-name>IDC '13 Proceedings of the 12th International Conference on Interaction Design and Children</conf-name>
          <conf-date>June 24-27</conf-date>
          <conf-loc>New York, NY, USA</conf-loc>
          <pub-id pub-id-type="doi">10.1145/2485760.2485794</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref19">
        <label>19</label>
        <nlm-citation citation-type="confproc">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Wärnestål</surname>
              <given-names>P</given-names>
            </name>
            <name name-style="western">
              <surname>Svedberg</surname>
              <given-names>P</given-names>
            </name>
            <name name-style="western">
              <surname>Nygren</surname>
              <given-names>J</given-names>
            </name>
          </person-group>
          <article-title>Co-constructing child personas for health-promoting services with vulnerable children</article-title>
          <year>2014</year>
          <conf-name>The ACM CHI Conference on Human Factors in Computing Systems</conf-name>
          <conf-date>April 26- May 01</conf-date>
          <conf-loc>Toronto, ON, Canada</conf-loc>
          <pub-id pub-id-type="doi">10.1145/2556288.2557115</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref20">
        <label>20</label>
        <nlm-citation citation-type="book">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Silverman</surname>
              <given-names>D</given-names>
            </name>
          </person-group>
          <source>Doing Qualitative Research</source>
          <year>2013</year>
          <publisher-loc>London, UK</publisher-loc>
          <publisher-name>Sage Publications</publisher-name>
        </nlm-citation>
      </ref>
      <ref id="ref21">
        <label>21</label>
        <nlm-citation citation-type="journal">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Waters</surname>
              <given-names>J</given-names>
            </name>
          </person-group>
          <article-title>Snowball sampling: a cautionary tale involving a study of older drug users</article-title>
          <source>International Journal of Social Research Methodology</source>
          <year>2014</year>
          <volume>18</volume>
          <issue>4</issue>
          <fpage>367</fpage>
          <lpage>380</lpage>
          <pub-id pub-id-type="doi">10.1080/13645579.2014.953316</pub-id>
        </nlm-citation>
      </ref>
      <ref id="ref22">
        <label>22</label>
        <nlm-citation citation-type="book">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Kolko</surname>
              <given-names>J</given-names>
            </name>
          </person-group>
          <source>Exposing the magic of design</source>
          <year>2011</year>
          <publisher-loc>Oxford, USA</publisher-loc>
          <publisher-name>Oxford University Press</publisher-name>
        </nlm-citation>
      </ref>
      <ref id="ref23">
        <label>23</label>
        <nlm-citation citation-type="web">
          <person-group person-group-type="author">
            <name name-style="western">
              <surname>Lindström</surname>
              <given-names>K</given-names>
            </name>
          </person-group>
          <source>Computer Sweden</source>
          <year>2013</year>
          <month>08</month>
          <day>23</day>
          <access-date>2016-04-27</access-date>
          <comment>Spel vill få en plats i vården 
          <ext-link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" xlink:href="http://computersweden.idg.se/2.2683/1.519064/spel-vill-fa-en-plats-i-varden?queryText=Spel">http://computersweden.idg.se/2.2683/1.519064/spel-vill-fa-en-plats-i-varden?queryText=Spel</ext-link>
          <ext-link ext-link-type="webcite" xlink:href="6h4tHudwZ"/></comment>
        </nlm-citation>
      </ref>
    </ref-list>
    <app-group>
      <app id="app1">
        <title>Multimedia Appendix 1</title>
        <p>Usability validation of The Legal Challenges in Digital Health (LCDH) Framework for exploring the relationship to valid regulations of 3 health-promoting digital services.</p>
        <media xlink:href="medinform_v4i2e17_app1.pdf" xlink:title="PDF File (Adobe PDF File), 30KB"/>
      </app>
    </app-group>
  </back>
</article>