A proposed architecture and method of operation for improving the protection of privacy and confidentiality in disease registers

BMC Medical Research Methodology

Volumn 3, Issue , 2003, Pages 1-13

  Churches, Tim ^a  

^a CENTRE FOR EPIDEMIOLOGY AND RESEARCH   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

CONFIDENTIALITY; IDENTITY; INFORMATION PROCESSING; MEDICAL INFORMATION SYSTEM; MEDICAL RECORD; PRIVACY; REGISTER; REVIEW; TECHNIQUE; ARTICLE; COMPUTER SECURITY; HUMAN; INFECTION CONTROL; METHODOLOGY;

COMPUTER SECURITY; CONFIDENTIALITY; DISEASE NOTIFICATION; HUMANS; MEDICAL RECORD LINKAGE; MEDICAL RECORDS; PRIVACY;

EID: 0642275698     PISSN: 14712288     EISSN: None     Source Type: Journal    
DOI: 10.1186/1471-2288-3-1     Document Type: Review

References (44)

1. Stroup NE, Zack MM and Wharton M Sources of Routinely Collected Data for Surveillance. Principles and Practice of Public Health Surveillance (Edited by: SE Teutsch, RE Churchill) Oxford, Oxford University Press 1994, 51-56
2. Anderson RJ Information technology in medical practice: safety and privacy lessons from the United Kingdom. Med J Aust 1999, 170:181-184
3. Kelly G Patient data, confidentiality, and electronics. BMJ 1998, 316:718-719
4. Vandenbroucke JP Maintaining privacy and the health of the public. BMJ 1998, 316:1331-1332
5. Al-Shahi R and Warlow C Using patient-identifiable data for observational research and audit. BMJ 2000, 321:1031-1032
6. Helliwell T, Hinde S and Warren V Cancer registries fear collapse [letter]. BMJ 2001, 322:730
7. Kmietowicz Z Registries will have to apply for right to collect patients' data without consent. BMJ 2001, 322:1199
8. Verity C and Nicoll A Consent, confidentiality, and the threat to public health surveillance. BMJ 2002, 324:1210-1213
9. Snaedal J The ethics of health sector databases. eHealth International 2002, 1:6
10. Schneier B Applied Cryptography New York, John Wiley and Sons Inc. 1996, 31-32
11. Etheridge Y PKI (public key infrastructure) - how and why it works. Health Manag Technol 2001, 22:20-21
12. Quantin C, Allaert F-A and Dussere L Anonymous statistical methods versus cryptographic methods in epidemiology. Int J Med Inf 2000, 60:177-183
13. Sweeney L Computational Disclosure Control for Medical Microdata: The Datafly System. In: Record Linkage techniques - 1997: Proceedings of an International Workshop and Exposition, Arlington, VA, March 20-21, 1997 (Edited by: Alvey W, Jamerson B) Washington DC, Federal Committee on Statistical Methodology, Office of Management and Budget 1997, 442-453
14. Mayer TS Privacy and Confidentiality Research and the U.S. Census Bureau: Recommendations Based on a Review of the Literature. Washington DC, U.S. Census Bureau, Statistical Research Division 2002,
15. World Wide Web Consortium Platform for Privacy Preferences (P3P) Project
16. Caulfield T, Upshur REG and Daar A DNA databanks and consent: A suggested policy option involving an authorization model. BMC Medical Ethics 2003, 4:1
17. Churches T A method for improving the protection of personal privacy and confidentiality in disease registers [abstract]. Australasian Epidemiologist 2001, 8:31
18. Boruch R and Cecil J Assuring the Confidentiality of Social Research Data. Philadelphia, University of Philadelphia Press 1979,
19. United States General Accounting Office Record Linkage and Privacy: Issues in Creating New federal Research and Statistical Information (GAO-01-126SP) Washington DC 2001, 79-82
20. Pommerening K, Miller M, Schidtmann I and Michaelis J Pseudonyms for cancer registries. Methods Inf Med 1996, 35:112-121
21. Blobel B Clinical Record Systems in Oncology: Experiences and Developments on Cancer Registers in Eastern Germany. In: Personal Medical Information. Security, Engineering, and Ethics (Edited by: Anderson R) Berlin, Springer 1997, 39-56
22. United States Patent Office US Patent 6,148,342: Secure database management system for confidential records using separately encrypted identifier and access request. Washington DC 2000,
23. Ho AP A Secret Splitting Method for the Protection of Confidentiality in Computer Records. In: Research Advances in Database and Information Systems Security (Edited by: Atluri V, Hale J) Boston, Kluwer Academic Publishers 2000,
24. Quantin C, Kerkri E, Allaert F-A, Bouzelat H and Dusserre L Security aspects of medical file regrouping for the epidemiological follow-up. In: Medinfo 98 (Edited by: McCray AT, Cesnik B, Scherrer J-R) Amsterdam, IOS Press 1999, 1135-1137
25. Borst F, Allaert F-A and Quantin C The Swiss Solution for Anonymously Chaining Patient Files. In: MedInfo 2001 (Edited by: Rogers R, Haux R, Patel V) Amsterdam, IOS Press 2001, 1239-1241
26. United States Patent Office US Patent 6,449,621: Privacy data escrow system and method. Washington DC 2002,
27. Szolovits P and Kohane I Against simple universal health-care identifiers. J Am Med Inform Assoc 1994, 1:316-319
28. Anderson RJ Remarks on the Caldicott Report. Cambridge, Cam-bridge University 1998,
29. Kohane I, Dong H and Szolovits P Health Information Identification and de-Indentification Toolkit. In: Proceedings, Annual Fall Symposium of the American Medical Informatics Association (Edited by: Chute C) Florida, Hanley and Belfus Inc 1998, 356-360
30. deCODE genetics What is the Icelandic Health Database? Reykjavik 2002,
31. Liberty Alliance Project Liberty Architecture Overview Version 1.0. Piscataway NJ 2002,
32. Kelman CW, Bass AJ and Holman CD Research use of linked health data-a best practice protocol. Aust N Z J Public Health 2002, 26:251-255
33. Anderson RJ The DeCODE Proposal for an Icelandic Health DataBase. Cambridge, Cambridge University 1998, 7
34. Black N and Payne M Infopoints: Improving the use of clinical databases. BMJ 2002, 324:1194
35. Gulcher J and Stefansson K The Icelandic Healthcare Database and Informed Consent. N Engl J Med 2000, 342:1827-1830
36. Rose H The Commodification of Bioinformation: The Icelandic Health Sector Database. London, The Wellcome Trust 2001,
37. Kaye J and Martin P Safeguards for research using large scale DNA collections. BMJ 2000, 321:1146-1149
38. Health Level Seven Inc. An Application Protocol for Electronic Data Exchange In Healthcare Environments, Draft Version 2.3. Ann Arbor 1996,
39. Object Management Group CORBAmed: OMG's Healthcare domain task force. Needham, MA 1999,
40. Object Management Group Person Identification Service specification (document formal/99-03-05). Needham, MA 1999,
41. Carnall D Medical software's free future. BMJ 2000, 321:976
42. Kerckhoffs A La cryptographie militaire. Journal des sciences militaires 1883, IX(5-83):161-191
43. Christen P and Churches T Joint Computer Science Technical Report TR-CS-02-05: Febrl - Freely extensible biomedical record linkage. Canberra: Australian National University 2002,
44. Yernini R, Papakonstantinou Y, Abiteboul S and Garcia-Molina H Fusion Queries over Internet Databases. In: Proceedings of the 6th International Conference on Extending Database Technology (EDBT), Valencia, Spain (Edited by: Schek H-J, Saltor F, Ramos I, Alonso G) Heidelberg, Springer-Verlag 1998, 57-71