Revealing the spatial distribution of a disease while preserving privacy

Proceedings of the National Academy of Sciences of the United States of America

Volumn 105, Issue 46, 2008, Pages 17608-17613

  Wieland, Shannon C ^a,b   Cassa, Christopher A ^b   Mandl, Kenneth D ^b,c   Berger, Bonnie ^a,d  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b BOSTON CHILDREN S HOSPITAL   (United States)

^c Harvard Medical School Center for Biomedical Informatics   (United States)

^d MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Data aggregation; Linear programming; Patient privacy; Spatial epidemiology

Indexed keywords

CONFIDENTIALITY; DISEASE SURVEILLANCE; HUMAN; MATHEMATICAL COMPUTING; PATIENT RIGHT; PRIORITY JOURNAL; PRIVACY; REVIEW; SYSTEM ANALYSIS;

CASE-CONTROL STUDIES; CLUSTER ANALYSIS; CONFIDENTIALITY; DISEASE; GEOGRAPHY; HUMANS; LINEAR MODELS; NEW YORK; POPULATION DENSITY;

EID: 56649089830     PISSN: 00278424     EISSN: 10916490     Source Type: Journal    
DOI: 10.1073/pnas.0801021105     Document Type: Review

References (25)

1. Seaman V (1798) An inquiry into the cause of the prevalence of the yellow fever in New York. Med Repository 1:315-372.
2. Sweeney L (2002) k-Anonymity: A model for protecting privacy. Int J Uncertainty Fuzziness Knowl Based Syst 10:557-570.
3. Brownstein J, Cassa C, Mandl K (2006) No place to hide: Reverse identification of patients from published maps. N Engl J Med 355:1741-1742.
4. Moskop JC, Marco CA, Larkin GL, Geiderman JM, Derse AR (2005) From Hippocrates to HIPAA: Privacy and confidentiality in emergency medicine. Part I: Conceptual, moral, and legal foundations. Ann Emerg Med 45:53-59.
5. Copyright Office, Library of Congress (2002) US Federal Register 67:53182-53273.
6. Fefferman NH, O'Neil EA, Naumova EN (2005) Confidentiality and confidence: Is data aggregation a means to achieve both? J Public Health Policy 26:430-449.
7. Olson KL, Grannis SJ, Mandl KD (2006) Privacy protection versus cluster detection in spatial epidemiology. Am J Public Health 96:2002-2008.
8. Cox LH (1996) Protecting confidentiality in small population health and environmental statistics. Stat Med 15:1895-1905.
9. Armstrong MP, Rushton G, Zimmerman DL (1999) Geographically masking health data to preserve confidentiality. Stat Med 18:497-525.
10. Cassa CA, Grannis SJ, Overhage M, Mandl KD (2006) A context-sensitive approach to anonymizing spatial surveillance data: Impact on outbreak detection. J Am Med Inform Assoc 13:160-165.
11. Machanavajjhala A, Kifer D, Abowd J, Gehrke J, Vilhuber L (2008) Privacy: Theory meets practice on the map. Proceedings of the 24th International Conference on Data Engineering, ICDE 2008, April 7-12 2008 (IEEE, Washington D.C.), pp 277-286.
12. Strayer JK (1989) Linear Programming and Its Applications (Springer, New York).
13. US Census Bureau (2000) Census 2000: Census Block Groups Cartographic Boundary Files Descriptions and Metadata. Available at www.census.gov/geo/ www/cob/bg_metadata.html. Accessed 12/1/07.
14. ILOG, Inc (1999) ILOG CPLEX (ILOG, Gentilly, France), Ver 10.010. Available at www.ilog.com/products/optimization/archive.cfm.
15. Kulldorff M, Nagarwalla N (1995) Spatial disease clusters: Detection and inference. Stat Med 14:799-810.
16. Kulldorff M (1997) A spatial scan statistic. Commun Stat Theory Methods 26:1481-1496.
17. VanWey LK, Rindfuss RR, Gutmann MP, Entwisle B, Balk DL (2005) Confidentiality and spatially explicit data: Concerns and challenges. Proc Natl Acad Sci USA 102:15337-15342.
18. Salazar-Gonzalez J (2005) Protecting tables with cell perturbation, Working Paper 25. Proceedings of the Joint UNECE/Eurostat Work Session on Statistical Data Confidentiality (UNECE/Eurostat, New York).
19. Duncan G, Fienberg S (1998) Obtaining information while preserving privacy: A Markov perturbation method for tabular data. Proc Stat Data Protection Conf (Eurostat, Lisbon), pp 351-362.
20. Kargupta H, Datta S, Wang Q, Sivakumar K (2005) Random-data perturbation techniques and privacy-preserving data mining. Knowl Inf Syst 7:387-414.
21. Gutmann MP, Stern PC (2007) Putting People on the Map: Protecting Confidentiality with Linked Social-Spatial Data. Panel on Confidentiality Issues Arising from the Integration of Remotely Sensed and Self-Identifying Data (National Research Council of the National Academies Press, Washington, DC).
22. Lakshmanan L, Ng R, Ramesh G (2005) To do or not to do: The dilemma of disclosing anonymized data. Proc ACM SIGMOD Conf (Association for Computing Machinery, New York), pp 61-72.
23. Ganta S, Acharya R (2008) On breaching enterprise data privacy through adversarial information fusion. Proc Workshop on Information Integration Methods, Architecture, and Systems, at the 24th IEEE International Conference on Data Engineering (IEEE, Washington D.C.), pp 246-249.
24. Aggarwal CC, Pei J, Zhang B (2006) On privacy preservation against adversarial data mining. Proc 12th ACM SIGKDD Conf (Association for Computing Machinery, New York), pp 510-516.
25. Spruill NL (1984) The confidentiality and analytic usefulness of masked business microdata. Review of Public Data Use, pp 307-314.