Data security and privacy: Role of regulatory frameworks in achieving Sustainable Development Goal 3

The growing usage of digital health technologies and medical devices can expose patient data and medical systems to cyberattacks. The paper examines how cybersecurity issues affect SDG 3 and how well current regulatory frameworks protect healthcare data. The study used PRISMA and used thematic synthesis. Digital health data security, IoT medical devices and patient safety, data integrity, ransomware threats, lack of cyber awareness, regulatory compliance, securing telemedicine, and long-term data protection could hinder SDG3 achievement. These issues endanger patient safety, delay emergency responses, and damage digital health system trust. While present legislative frameworks provide core protection for healthcare data, they fail in numerous key areas. Some frameworks have delayed breach notification, implementation issues and resource limits, weak or optional security standards, lack of healthcare-specific focus, and old or inflexible frameworks. Thus, while existing frameworks improve data governance, their limited adaptability, outmoded restrictions, and inconsistent implementation reduce their usefulness in tackling healthcare's developing cybersecurity issues. Healthcare systems are vulnerable to cyberattacks, compromising patient safety, trust, and general health and well-being. The paper advises obligatory data protection, safe IoT legislation, staff training, and revised telemedicine rules to improve hospital cybersecurity. To fulfil SDG 3, it recommends harmonised cross-border legal frameworks and targeted capacity building in low- and middle-income countries.