The study aimed to identify information security and privacy challenges concerning Personal eHealth Services (PeHS) via a systematic literature review. The result shows that there are several challenges to consider. In total, 8 themes of challenges were identified. Some examples of challenges are access control, patient trust, collaboration between multiple parties and the need for more knowledge. Further, to deal with the challenges, there is a need to improve governance and management of information security and privacy at the regional and national levels to include new services such as PeHS. Regardless of whether the patient information goes via the intra/inter-organizational e-health services or the Patient eHealth Services, the information is part of the patient's total information flow and must be included as a prominent part of healthcare's information security and privacy work to gain patient-centred and transparent care.