Evaluating Predictors of Geographic Area Population Size Cut-offs to Manage Re-identification Risk

Journal of the American Medical Informatics Association

Volumn 16, Issue 2, 2009, Pages 256-266

  El Emam, Khaled ^a,b   Brown, Ann ^a   AbdelMalik, Philip ^c  

^a CHILDREN S HOSPITAL OF EASTERN ONTARIO   (Canada)

^b UNIVERSITY OF OTTAWA   (Canada)

^c PUBLIC HEALTH AGENCY OF CANADA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

ARTICLE; CONTROLLED STUDY; DEMOGRAPHY; GEOGRAPHIC ELEVATION; HEALTH SERVICE; HUMAN; POPULATION RESEARCH; POPULATION SIZE; RISK ASSESSMENT; SCORING SYSTEM;

CANADA; CENSUSES; CONFIDENTIALITY; DEMOGRAPHY; GEOGRAPHY; HEALTH SERVICES RESEARCH; HUMANS; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; MODELS, THEORETICAL; POPULATION DENSITY; RISK;

EID: 60549085042     PISSN: 10675027     EISSN: None     Source Type: Journal    
DOI: 10.1197/jamia.M2902     Document Type: Article

References (66)

1. Platt P., Hendlisz L., and Intrator D. Privacy Law in the Private Sector: An Annotation of the Legislation in Canada (2004), Canada Law Book
2. Willison D., Emerson C., Szala-Meneok K., et al. Access to medical records for research purposes: Varying perceptions across Research Ethics Boards. J Med Ethics 34 (2008) 308-314
3. Woolf S., Rothemich Jr. S., and Marsland D. Selection bias from requiring patients to give consent to examine data for health services research. Arch Fam Med 9 (2000) 1111-1118
4. Junghans C., Feder G., Hemingway H., Timmis A., and Jones M. Recruiting patients to medical research: Double blind randomised trial of 'opt-in' versus 'opt-out' strategies. Br Med J 331 7522 (2005) 940 Oct 22; Epub 2005 Sep 12
5. Jacobsen S., Xia Z., Campion M., et al. Potential effect of authorization bias on medical records research. Mayo Clin Proc 74 4 (1999) 330-338
6. Nelson K., Rosa E., Brown J., et al. Do patient consent procedures affect participation rates in health services research?. Med Care 40 4 (2002) 283-288
7. McKinney P., Jones S., Parslow R., et al. A feasibility study of signed consent for the collection of patient identifiable information for a national paediatric clinical audit database. Br Med J 330 7496 (2005) 877-879 Apr 16; Epub 2005 Mar 18
8. Tu J., Willison D., Silver F., et al. Impracticability of informed consent in the Registry of the Canadian Stroke Network. N Engl J Med 350 14 (2004) 1414-1421
9. Armstrong D., Kline-Rogers E., Jani S., et al. Eagle. Potential impact of the HIPAA privacy rule on data collection in a registry of patients with acute coronary syndrome. Arch Intern Med 165 (2005) 1125-1129
10. Al-Shahi R., Vousden C., and Warlow C. Bias from requiring explicit consent from all participants in observational research: Prospective, population based study. Br Med J 331 (2005) 942
11. El Emam K, Jonker E, Sams S, et al. Pan-Canadian de-identification guidelines for Personal health information Available at: http://www.ehealthinformation.ca/documents/OPCReportv11.pdf]. Archived at: http://www.webcitation.org/5Ow1Nko5C]. Accessed: May 18, 2007.
12. Boulos M. Towards evidence-based, GIS-driven national spatial health information infrastructure and surveillance services in the United Kingdom. Int J Health Geographics 3 1 (2004)
13. O'Dwyer L.A., and Burton D.L. Potential meets reality: GIS and Public health research in Australia. Aust N Z J Pub Health 22 7 (1998) 819-823
14. Ricketts T.C. Geographic information systems and public health. Annu Review Pub Health 24 (2003) 1-6
15. Cromley E.K. GIS and disease. Annu Review Pub Health 24 (2003) 7-24
16. Brindley P., and Maheswaran R. My favourite software: Geographic information systems. J Pub Health Med 24 2 (2002) 149
17. Richards T.B., Croner C.M., Rushton G., Brown C.K., and Fowler L. Geographic information systems and public health: Mapping the future. Pub Health Rep 114 (1999) 359-373
18. Mugge R. Issues in protecting confidentiality in national health statistics. Proceedings of the Social Statistics Section, American, Statistical Association (1983)
19. Mackie C., and Bradburn N. Improving Access to and Confidentiality of Research Data: Report of a Workshop (2000), National Academies
20. Justice Gibson. Mr. Mike Gordon and the Minister of Health and Privacy Commissioner of Canada, Federal Court of Canada, February 27 2008.
21. Brownstein J., Cassa C., and Mandl K. No place to hide-Reverse identification of patients from published maps. N Engl J Med 355 16 (2006) 1741-1742
22. Brownstein J., Cassa C., Kohane I., and Mandl K. An unsupervised classification method for inferring original case locations from low-resolution disease maps. Int J Health Geographics 5 56 (2006)
23. Curtis A., Mills J., and Leitner M. Spatial confidentiality and GIS: Re-Engineering mortality locations from published maps about Hurricane Katrina. Int J Health Geographics 5 44 (2006)
24. Armstrong M., Rushton G., and Zimmerman D. Geographically masking health data to preserve confidentiality. Stat Med 18 (1999) 497-525
25. Zimmerman D., and Pavlik C. Quantifying the effects of masking metadata disclosure and multiple releases on the confidentiality of geographically masked health data. Geogr Anal 40 (2008) 52-76
26. Fefferman N., O'Neil E., and Naumova E. Confidentiality and confidence: Is data aggregation a means to achieve Both?. J Pub Health Pol 16 (2005) 430-449
27. Willenborg L., Mokken R., and Pannekoek J. Microdata and disclosure risks. Proceedings of the Annual Research Conference of United States Bureau of the Census (1990)
28. Olson K., Grannis S., and Mandl K. Privacy protection versus cluster detection in spatial epidemiology. Am J Pub Health 96 11 (2006) 2002-2008
29. Hawala S. Enhancing the "100,000" rule: on the variation of percent of uniques in a microdata sample and the geographic area size identified on the file. Proceedings of the Annual Meeting of the American, Statistical Association (2001)
30. Greenberg B., and Voshell L. Relating risk of disclosure for microdata and geographic area size. Proceedings of the Section on Survey Research Methods, American Statistical Association (1990)
31. Greenberg B., and Voshell L. The geographic component of disclosure risk for microdata. Bureau of The Census (1990)
32. Zayatz L., Massell P., and Steel P. Disclosure limitation practices and research at the US Census Bureau. Neth Off Statistics 14 Spring (1999) 26-29
33. Zayatz L. Disclosure Avoidance Practices and Research at the US Census Bureau: An Update (2005), United States Census Bureau
34. Hawala S. Microdata disclosure protection research and experiences at the US Census Bureau. Proceedings of the Workshop on Microdata, 2003 Available at: http://www.census.gov/srd/sdc/microdataprotection.pdf]. Archived at: http://www.webcitation.org/5b7mPeVPi]. Accessed: September 26, 2008.
35. Rudolph B., Shah G., and Love D. Small numbers, disclosure risk, security, and reliability issues in web-based data query systems. J Pub Health Manag Practice 12 2 (2006) 176-183
36. Stoto M. Statistical issues in interactive web-based public health data dissemination systems (2003), RAND Health
37. Marsh C., Dale A., and Skinner C. Safe data versus safe settings: Access to microdata from the British census. Int Stat Review 62 1 (1994) 35-53
38. Statistics Canada, Canadian Community. Health survey (CCHS). Cycles 2005;3:1 Public Use Microdata File (PUMF) User Guide. 2006.
39. Willenborg L., and de Waal T. Statistical Disclosure Control in Practice (1996), Springer-Verlag
40. Standards for Privacy of Individually Identifiable Health Information, in Federal Register, Dec 28, 2000 (Volume 65, Number 250). 2000. p. 82,511-82,560.
41. El Emam K. Overview of factors affecting the risk of Re-identification in Canada, 2006, Access to Information and Privacy Division, Health Canada.
42. Dalenius T. Finding a needle in a haystack or identifying anonymous census records. J Off Stat 2 3 (1986) 329-336
43. Bethlehem J., Keller W., and Pannekoek J. Disclosure control of microdata. J Am Stat Assoc 85 409 (1990) 38-45
44. Statistics Canada. Census public use Microdata file: Individuals file user Documentation (2001)
45. Long S. Regression Models for Categorical and Limited Dependent Variables (1997), Sage Publications
46. Breen R. Regression Models for Censored, Sample-Selected, and Truncated Data (1996), Sage Publications
47. Maddala G. Limited-Dependent and Qualitative Variables in Econometrics (1983), Cambridge University Press
48. McKelvey R., and Zavoina W. A statistical model for the analysis of ordinal level dependent variables. J Math Sociol 4 (1975) 103-120
49. 2 measure for limited and qualitative dependent variable models. J Econ 56 (1993) 341-356
50. Veall M., and Zimmermann K. Goodness of fit measures in the Tobit model. Oxf Bull Econ Stat 56 4 (1994) 485-499
51. Cherkassky V., and Muller F. Learning from Data (1998), Wiley
52. Alpaydin E. Introduction to Machine Learning (2004), MIT Press
53. th Annual SAS Users Group International Conference (1999)
54. Zoutman D., Ford B., and Bassili A. The confidentiality of patient and physician information on pharmacy prescription records. CMAJ 170 5 (2004) 815-816
55. Zoutman D., Ford B., and Bassili A. Privacy of pharmacy prescription records (author response). CMAJ 171 7 (2004) 712
56. Canadian Pharmaceutical Association. Pharmacy claim standard (version 03) (2006)
57. Fineberg A. Information requested for "Re-identification Study" (2006), IMS Health Canada
58. Office of the Information and Privacy Commissioner Order of Alberta. Order H2002-003: Alberta Pharmacies and Pharmacists. 2003.
59. Brogan, Inc. MedMap Drug Utilization Program, Program Overview, 2008.
60. El Emam K. Data Anonymization practices in clinical research: A descriptive Study (2006), Health Canada Access to Inf and Privacy Division
61. Sweeney L. Uniqueness of simple demographics in the US population (2000), Carnegie Mellon University Lab for Int Data Privacy
62. Golle P. Revisiting the uniqueness of simple demographics in the US population. Workshop on Privacy in the Electronic Society (2006)
63. Samarati P. Protecting respondents' identities in microdata release. IEEE Trans Knowl Data Eng 13 6 (2001) 1010-1027
64. Sweeney L. k-anonymity: A model for protecting privacy. Int J Uncertainty, Fuzziness and Knowl-Based Syst 10 5 (2002) 557-570
65. El Emam K., Jabbouri S., Sams S., Drouet Y., and Power M. Evaluating common de-identification heuristics for personal health information. J Med Internet Res 8 4 (2006) e28
66. El Emam K. Heuristics for de-identifying health data. IEEE Sec Privacy (2008) 72-75