# Data Protection and Privacy of the Internet of Healthcare Things (IoHTs)
## 3 IoHT Security Landscape
### Essential Security Features of IoHT  
Following are some of the essential security features of IoHT.  
Use of Standardized Devices: To ensure data privacy and security in healthcare systems, it is essential to use standardized devices with reliable security features. These devices should meet healthcare standards and policies. Data storage, transmission, format interchanges, terminologies, and presentation standards should be well-defined. No medical devices, either implantable or wearable, are allowed to be manufactured if they do not meet data standards.  
Log Management and Compliance: Every management activity performed on these healthcare devices should be appropriately logged on the healthcare servers. For data privacy, there is a need to know who is accessing what data from which system. The best practices are gathering log files and saving them for future references as long as you need them. In distributed systems, these reports should be shared with other systems to prove compliance.  
Updating Technologies: Technologies are considered the workforce behind the advancement in healthcare systems, and recent innovations have proven this. Technologies have changed the healthcare system to increase the accessibility of treatment that leads to improved care and efficiency. The latest components are more efficient and secure as compared to the previous ones. Therefore, the new devices with the latest technologies should be preferred over the old ones.  
Patch Management: In addition to upgrading hardware, updating the software of IoT device's firmware is also essential; if it is not updated, it may be vulnerable. The software vendors release patches from time to time to overcome the flaws and loopholes. Every device which is connected to the Internet needs to be updated, whether it is a personal computer, smartphone, or any other device such as IoT [20].  
User's Profiling: The users should be identified and authenticated; the system must know what resources a user can access. This process is called authorization. This process ensures that the behavior of the users is constrained according to the user's permission. User profiling is more critical in healthcare applications. Healthcare organizations must comply with international standards and procedures regarding user authentication and authorization. The exchange of patient data must permanently preserve privacy constraints with professional liabilities.  
Generate Alerts: There should be some proper mechanism for IoHT to generate alerts for any kind of malicious event. Intermediate devices can play an essential role in this regard with the help of some applications. Warnings should be raised for critical events and emergencies. These devices can analyze received data; after the detection of any malicious activity, alerts can be directly transmitted to the monitoring server or system. Availability of IoHT should be the top priority; if any critical IoHT device goes off for any reason, intermediate devices communicate with them directly; therefore, generating alerts by these devices could help the emergency response team to respond more quickly.  
Fines and Penalties: A mechanism should be implemented in the healthcare sector against attackers that attack healthcare systems and devices and try to leak or steal healthcare information. Healthcare data is confidential, and if an attacker tries to breach the healthcare system for the purpose of data-stealing by any means they should be charged with penalties or imprisonment.