Using lessons from health care to protect the privacy of library users: Guidelines for the de-identification of library data based on HIPAA

Journal of the American Society for Information Science and Technology

Volumn 58, Issue 8, 2007, Pages 1198-1206

  Nicholson, Scott ^a   Smith, Catherine Arnott ^b  

^a SYRACUSE UNIVERSITY   (United States)

^b University of Wisconsin Madison   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCOUNTABILITY; HEALTH INSURANCE PORTABILITY; PROTECTION OF DATA;

DATA PRIVACY; DATA WAREHOUSES; DIGITAL LIBRARIES; HEALTH INSURANCE; PUBLIC POLICY; STANDARDIZATION; USER INTERFACES;

HEALTH CARE;

EID: 34250223098     PISSN: 15322882     EISSN: 15322890     Source Type: Journal    
DOI: 10.1002/asi.20600     Document Type: Review

References (32)

1. American Library Association. (2004a). Privacy tool kit: I. Introduction. Retrieved September 22, 2004, from http://www.ala.org/ala/oif/iftoolkits/ toolkitsprivacy/introduction/introduction.htm
2. American Library Association. (2004b). State privacy laws regarding library records. Retrieved September 23, 2004, from http://www.ala.org/Template. cfm?Section=stateifcinaction&Template=/ContentManagement/ContentDisplay. cfm&ContentID=14773
3. American Library Association. (2007). The USA Patriot Act. Retrieved March 25, 2007, from http://www.ala.org/ala/washoff/WOissues/civilliberties/ theusapatriotact/usapatriotact.htm
4. Carman, D.M. (1997). Balancing patient confidentiality and release of information. Bulletin of the American Society for Information Science, 23(3), 16-17.
5. Centers for Disease Control and Prevention. (2003). Appendix A: Research exempt under 45CFR46.101B. Retrieved December 3, 2004, from http://www.cdc.gov/ epo/ads/section-iif.htm
6. Clifton, C., Kantarcioglu, M., Vaidya, J., Lin, X., & Zhu, M. (2004). Tools for privacy preserving distributed data mining. ACM SIGKDD Explorations, 4(2), 1-7.
7. Definitions, 42 U.S.C. § 1320d(6) (2002).
8. Final rule: Health Insurance Portability and Accountability Act (HIPAA) privacy regulations. 65 Fed Reg. 82461-510 (Dec. 28, 2000) (codified at 45 C.F.R. §§160-164).
9. Flanders, L. (2002). Librarians under siege. The Nation, 275(5), 42-44.
10. Gleason, O.C., & Yates, W.R. (2004). Suicide attempt due to a misunderstood HIPAA notice. American Journal of Psychiatry, 161(2), 374.
11. Goodwin, L.K., & Prather, J.C. (2002). Protecting patient privacy in clinical data mining. Journal of Healthcare Information Management, 16(4), 62-67.
12. Gutheil, T.G., & Milliard, J.T. (2001). 'Don't write me down': Legal, clinical, and risk-management aspects of patients' requests that therapists not keep notes or records. American Journal of Psychotherapy, 55(2), 157-165.
13. Health Insurance Portability and Accountability Act of 1996, Pub. L. No. 104-191 (1996). Retrieved March 25, 2007, from http://aspe.hhs.gov/admnsimp/ p1104191.htm
14. Holland, J. (2004). House may revive parts of Patriot Act II. Retrieved September 22, 2004, from http://www.guardian.co.uk/worldlatest/story/0,1280,- 4508884.00.html
15. Johnson, S.B., & Friedman, C. (1996, October). Integrating data from natural language processing into a clinical information system. Paper presented at the AMIA Fall Symposium. Washington, DC.
16. Kennedy, B.M. (1989). Confidentiality of library records: A survey of problems, policies, and laws. Law Library Journal, 81(4), 733-767.
17. Li, J., & Shaw, M. (2004). Protection of health information in data mining. International Journal of Healthcare Technology and Management, 6(2), 210-222.
18. Lichtblau, E. (2004, July 9). Effort to curb scope of antiterrorism law falls short. New York Times, p. 16.
19. Lindberg, D.A. (1968). Computers in clinical medical education. In Proceedings of the Conference on the Use of Computers in Medical Education (pp.53-56). Oklahoma City, OK: University of Oklahoma Medical Center.
20. Merz, J.F., Spina, B.J., & Sankar, P. (1999). Patient consent for release of sensitive information from their medical records: An exploratory study. Behavioral Sciences & the Law, 17, 445-454.
21. Million, A., & Fisher, K. (1986). Library records: A review of confidentiality laws and policies. Journal of Academic Librarianship, 11(6), 346-349.
22. Murphy, D. (2003, April 7). Some librarians use shredder to show opposition to new F.B.I. powers. New York Times, p. 12.
23. Neuhaus, P. (2003). Privacy and confidentiality in digital reference. Reference & User Services Quarterly, 43(1), 26-36.
24. Nicholson, S. (2003). Avoiding the great data-wipe of ought-three. American Libraries, 34(9), 36.
25. Nicholson S. (2006). The basis for bibliomining: Frameworks for bringing together usage-based data mining and bibliometrics through data warehousing in digital library services. Information Processing & Management, 42(3), 785-804.
26. Smith, G.R. (2001, February 8). AAMC Testimony on the Final HHS Privacy Regulations. Washington. DC: American Association of Medical Colleges. Retrieved November 24, 2004, from http://www.aamc.org/advocacy/library/hipaa/testimony/ 2001/020801.htm
27. Spiegel, A.D., & Springer, C.R. (1997). Babylonian medicine, managed care and Codex Hammurabi, circa 1700 B.C. Journal of Community Health, 22(1), 69-89.
28. Sweeney, L. (1997). Weaving technology and policy together to maintain confidentiality. The Journal of Law, Medicine & Ethics, 25(2/3), 98-110.
29. Sweeney, L. (2004, July). HIPAA De-idenitifcation strategies for hospitals. Paper presented at the Presentation at the Easing the Burden on Research: Practical Strategies for De-Identifying Patient Data for Research and E-Health Teleconference.
30. USA Patriot Act. (2001). Uniting and Strengthening America by Providing Appropriate Tools to Intercept and Obstruct Terrorism Act of 2001. Pub. L. No. 107-56, 115 Stat. 272.
31. U.S. Health and Human Services. (2002). Standards for Privacy of Individually Identifiable Health Information: Other Requirements Relating to Uses and Disclosures of Protected Health Information, 45 CFR Parts 160 and 164. Federal Register, 67(157).
32. Wasserman, L.M., Jones, O.W., Trombold, J.S., & Sadler, G.R. (2000). Attitudes of physicians regarding receiving and storing patients' genetic testing results for cancer susceptibility. Journal of Community Health, 25, 305-313.