ISO/TR 29922: Health Informatics — Mobile Health — Framework for Interoperability, Data Privacy, and Quality in mHealth

Introduction to Mobile Health Standardization

ISO/TR 29922 provides a comprehensive technical framework for the standardization of mobile health (mHealth) technologies. As smartphones and wearable devices have become ubiquitous, mHealth applications are transforming healthcare delivery by enabling remote patient monitoring, health behavior tracking, telemedicine consultations, and just-in-time health interventions. However, the rapid proliferation of mHealth solutions has outpaced the development of standards governing interoperability, data privacy, clinical validity, and quality assurance. This technical report addresses these gaps by surveying the existing standards landscape, identifying key challenges, and proposing a structured approach for mHealth standardization.

The standard defines mHealth as “medical and public health practice supported by mobile devices, such as mobile phones, patient monitoring devices, personal digital assistants, and other wireless devices.” It distinguishes between several categories: wellness apps (fitness tracking, diet logging), clinical decision support apps, disease management apps (diabetes, hypertension, asthma), remote monitoring systems, and telemedicine platforms. Each category presents different requirements for data accuracy, clinical validation, privacy protection, and regulatory oversight.

Interoperability Architecture and Data Standards

A central challenge addressed by ISO/TR 29922 is interoperability — the ability of different mHealth systems, devices, and healthcare information systems to exchange and use health data seamlessly. The standard identifies three levels of interoperability: foundational (data transport), structural (data format and syntax), and semantic (data meaning and context). For each level, the standard surveys relevant standards and proposes a layered architecture for mHealth interoperability based on established health informatics standards.

HL7 FHIR (Fast Healthcare Interoperability Resources) is identified as a key enabler for mHealth interoperability. FHIR’s modern RESTful API design, support for JSON/XML serialization, and granular resource model make it well-suited for mobile applications. ISO/TR 29922 provides guidance on implementing FHIR profiles for common mHealth use cases, including patient-generated health data (PGHD), wearable device measurements, and symptom diaries. The standard also addresses the use of the ISO/IEEE 11073 Personal Health Device (PHD) standards for connecting medical sensors and wearables to mobile applications, ensuring that device data formats are harmonized across manufacturers.

Data Privacy, Security, and Quality Assurance

ISO/TR 29922 dedicates significant attention to data privacy and security. mHealth applications collect highly sensitive personal health information, yet many lack even basic security protections. The standard maps privacy requirements to the ISO 27799 (health information security management) and ISO/TS 17975 (health data provenance) frameworks. Key requirements include data encryption at rest and in transit, user authentication (biometric or two-factor), granular consent management, and data minimization — collecting only the data necessary for the stated purpose.

Quality assurance for mHealth applications is another major focus. ISO/TR 29922 proposes a multi-dimensional quality framework covering: (1) Clinical validity — does the app deliver measurable health benefits? (2) Usability — can the target population use the app effectively? (3) Technical quality — does the app perform reliably, with acceptable battery consumption and data accuracy? (4) Content quality — is the health information accurate, up-to-date, and evidence-based? The standard references established evaluation frameworks such as the WHO mHealth Assessment Guidelines, the NICE Evidence Standards Framework, and the ISO 9241 usability standards.

Engineering Design Insights

For developers and engineers building mHealth solutions, ISO/TR 29922 offers several architectural guidelines. The standard recommends a modular architecture separating data acquisition, data processing, data storage, and data presentation layers. This separation enables independent testing and validation of each layer and facilitates compliance with evolving regulatory requirements. The standard also recommends using platform-agnostic development approaches (e.g., HTML5 with responsive design or cross-platform frameworks like Flutter or React Native) to maximize accessibility across different mobile platforms.

From a data management perspective, the standard recommends adopting an offline-first architecture. mHealth applications must function reliably in environments with intermittent connectivity — including clinical settings with restricted Wi-Fi and rural areas with limited cellular coverage. Local data storage should use encrypted databases (e.g., SQLCipher for SQLite), and synchronization protocols should handle conflicts gracefully using a “last-writer-wins” or “version-vector” approach. The standard also provides guidance on data retention policies, recommending that personal health data be retained locally for a minimum period defined by local regulations (typically 1-10 years depending on jurisdiction).