Multicenter patient records research: Security policies and tools

Journal of the American Medical Informatics Association

Volumn 6, Issue 6, 1999, Pages 435-443

  Behlen, Fred M ^a   Johnson, Stephen B ^b  

^a UNIVERSITY OF CHICAGO   (United States)

^b Howard Hughes Medical Institute   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ARTICLE; CLINICAL PROTOCOL; CONFIDENTIALITY; DATA BASE; GOVERNMENT; LAW; MEDICAL INFORMATION; MEDICAL RECORD; MEDICAL RESEARCH; MULTICENTER STUDY; PATIENT RIGHT; POLICY;

EID: 0033368596     PISSN: 10675027     EISSN: None     Source Type: Journal    
DOI: 10.1136/jamia.1999.0060435     Document Type: Article

References (44)

1. Huffman EK. Medical Record Management. 6th ed, revised by the American Medical Record Association. Price E (ed). Berwyn, Ill: Physicians' Record Co., 1972.
2. Melton LJ. The threat to medical records research. N Engl J Med. 1997;337:1466-70.
3. National Institute of Medicine (U.S.), Committee on Improving the Patient Record. The Computer-based Patient Record: An Essential Technology for Health Care. Dick RS, Steen EB (eds). Washington, DC: National Academy Press, 1991.
4. National Institute of Medicine (U.S.), Committee on Improving the Patient Record. The Computer-based Patient Record. Rev ed. Dick RS, Steen EB, Detmer DE (eds). Washington, DC: National Academy Press, 1997.
5. Fitzmaurice JM. Computer-based patient records. In: Bronzino JD (ed). The Biomedical Engineering Handbook. Boca Raton, Fla: CRC Press, 1995:2623-34.
6. Epstein AM. The outcomes movement: Will it get us where we want to go? N Engl J Med. 1990;323:266-70.
7. Lazaridis EN. Database standardization, linkage, and the protection of privacy. Ann Intern Med. 1997;127:696.
8. Gostin LO. Health information privacy. Cornell Law Rev. 1995;80:451-528.
9. Gostin LO, Turek-Brezina J, Powers M, Kozloff R, Faden R, Steinauer DD. Privacy and security of personal information in a new health care system. JAMA. 1993;270:2487-93.
10. Institute of Medicine (U.S.), Committee on Regional Health Data Networks. Health Data in the Information Age: Use, Disclosure, and Privacy. Davidson MS, Lohr KL (eds). Washington, DC: National Academy Press, 1994.
11. National Research Council, Committee on Maintaining Privacy and Security in Health Care Applications of the National Information Infrastructure. For the Record: Protecting Electronic Health Information. Washington, DC: National Academy Press, 1997.
12. Rindfleisch TC. Privacy, information technology, and health care. Communications of the ACM. 1997;40:93-100.
13. Goslin LO. Health care information and the protection of personal privacy: ethical and legal considerations. Ann Intern Med. 1997;127:683-90.
14. Lowrance WW. Privacy and Health Research. Washington, DC: Department of Health and Human Services, 1997.
15. Gostin LO, Lazzarini Z, Neslund VS, Osterholm MT. The public health information infrastructure: a national review of the law on health information privacy. JAMA. 1996;275: 1921-7.
16. Federal Policy for the Protection of Human Subjects, 56 Federal Register 28003 (Jun 18, 1991).
17. Protection of Human Subjects, 45 CFR §46 (1991).
18. National Commission for the Protection of Human Subjects of Biomedical and Behavioral Research. The Belmont Report. Washington, DC: Department of Health, Education and Welfare, 1979.
19. Rivest RL. The MD4 message-digest algorithm. Internet Engineering Task Force Web site. Network Working Group Request for Comments (RFC) 1320. Apr 1992. Available from: http://www.ietf.org. (Also available at: ftp://ftp.isi.edu/ in-notes/rfc1320.text.) Accessed July 23, 1999.
20. Rivest RL. The MD5 message-digest algorithm. Internet Engineering Task Force Web site. Network Working Group Request for Comments (RFC) 1321. Apr 1992. Available from: http://www.ietf.org. (Also available at: ftp://ftp.isi.edu/ in-notes/rfc1321.text.) Accessed July 23, 1999.
21. Federal Committee on Statistical Methodology, Subcommittee on Disclosure-avoidance Techniques. Report on Statistical Disclosure and Disclosure Avoidance Techniques. Statistical Policy Working Paper, vol 2. Washington, DC: Government Printing Office, 1978.
22. Boruch RF, Cecil JS. Assuring the Confidentiality of Social Research Data. Philadelphia, Pa: University of Pennsylvania Press, 1979.
23. Alexander LA, Jabine TB. Access to Social Security microdata files for research and statistical purposes. Social Security Bull. 1978;41:3-17.
24. Sweeney L. Guaranteeing anonymity when sharing medical data: the Datafly system. Proc AMIA Annu Fall Symp. 1997: 51-5.
25. Mueller W, Blien U, Wirth H. Identification risks of microdata. Sociol Methods Res. 1995;24:131-57.
26. Association of American Medical Colleges. Health Data Security, Patient Privacy, and the Use of Archival Patient Materials in Research. Washington, DC: AAMC, 1997.
27. Sweeney L. Replacing personally identifying information in medical records: the Scrub system. Proc AMIA Annu Fall Symp. 1996:333-7.
28. American Medical Association, Council on Ethical and Judicial Affairs. Code of Medical Ethics: Current Opinions with Annotations. Chicago, Ill: AMA, 1997.
29. Alpert SA. Health care information: access, confidentiality, and good practice. In: Goodman KW (ed). Ethics, Computing, and Medicine. Cambridge, England: Cambridge University Press, 1998:75-101.
30. Gostin LO, Lazzarini Z, Flaherty KM. Legislative Survey of State Confidentiality Laws: Final Report Presented to the U.S. Centers for Disease Control and Prevention. Atlanta, Ga.: U.S. Centers for Disease Control and Prevention, 1996.
31. Jaffee v. Redmond. 116 Sup Ct 1923 (1996).
32. Smith RE. Guidelines and mechanisms for protecting privacy in medical data used for research. In: Chapman AR (ed). Health Care and Information Ethics. Kansas City, Mo: Sheed & Ward, 1997:279-308.
33. Schwartz PM, Reidenberg JR. Data Privacy Law: A Study of United States Data Protection. Charlottesville, Va: Mitchie Law Publishers, 1996.
34. Department of Health and Human Services (DHHS), Office for Protection from Research Risks. Sample language for a DHHS Multiple Project Assurance (MPA) for compliance with DHHS regulations for the protection of human subjects (45 CFR 46), in accordance with the federal policy (effective August 19, 1991) and as may otherwise be amended. Rockville, Md: DHHS OPRR, 1998.
35. National Committee on Vital and Health Statistics. Health Privacy and Confidentiality Recommendations. Washington, DC: Government Printing Office, 1997.
36. Classen DC, Evans RS, Pestotnik SL, et al. The timing of prophylactic administration of antibiotics and the risk of surgical wound infection. N Engl J Med. 1992;326:281.
37. Lowrance WW. Modern Science and Human Values. New York: Oxford University Press, 1985.
38. President's Advisory Commission on Consumer Protection and Quality in the Health Care Industry. Confidentiality of health information. Consumer Bill of Rights and Responsibilities, chap 6. Washington, DC: Government Printing Office, 1998.
39. Secretary of Health and Human Services. Individually Identifiable Health Information: Recommendations of the Secretary of Health and Human Services, Pursuant to Section 264 of the Health Insurance Portability and Accountability Act of 1996. Rockville, Md: DHHS, 1997.
40. Johnson SB. NAMCIC Milestone 7 Report, Columbia Site Project. Arlington, Va: Defense Advanced Research Projects Agency, 1997.
41. Behlen FM. NAMCIC Milestone 7 Report, Chicago Site Project. Arlington, Va: Defense Advanced Research Projects Agency, 1997.
42. Behlen FM, Johnson SB. Security architecture for multisite patient records research. Proc AMIA Annu Fall Symp. 1999: 476.
43. Wiederhold G, Bilello M, Sarathy V, Qian X. A security mediator for health care information. Proc AMIA Annu Fall Symp. 1996:120-4.
44. Lin TY, Qian S (eds). Database Security XI: Status and Prospects. Proceedings of the 11th International Conference on Database Security; Aug 10-13, 1997; Lake Tahoe, Calif. New York: Chapman & Hall, on behalf of the International Federation for Information Processing (IFIP), 1998.