Strategies for health data exchange for secondary, cross-institutional clinical research

Computer Methods and Programs in Biomedicine

Volumn 99, Issue 3, 2010, Pages 230-251

  Elger, Bernice S ^a   Iavindrasana, Jimison ^a   Lo Iacono, Luigi ^b   Müller, Henning ^a,c   Roduit, Nicolas ^a   Summers, Paul ^d   Wright, Jessica ^e  

^a UNIVERSITY OF GENEVA   (Switzerland)

^b NEC LABORATORIES EUROPE   (Germany)

^c UNIVERSITY OF APPLIED SCIENCES WESTERN SWITZERLAND   (Switzerland)

^d UNIVERSITY OF OXFORD   (United Kingdom)

^e UNIVERSITY OF SHEFFIELD   (United Kingdom)

Author keywords

Clinical research; Consent; Health data; Pseudonymisation; Reasonable anonymisation; Secondary use

Indexed keywords

ELECTRONIC DATA INTERCHANGE; PROFESSIONAL ASPECTS;

CONSENT; HEALTH DATA; PSEUDONYMISATION; REASONABLE ANONYMISATION; SECONDARY USE;

CLINICAL RESEARCH;

ARTICLE; CLINICAL RESEARCH; COMPUTATIONAL FLUID DYNAMICS; CONTROLLED STUDY; DATA ANALYSIS; DATA MINING; DECISION MAKING; HUMAN; INFORMED CONSENT; INTRACRANIAL ANEURYSM; LEGAL ASPECT; MAJOR CLINICAL STUDY; MEDICAL INFORMATION; MEDICAL RECORD; MEDICAL RESEARCH; OUTCOMES RESEARCH; PATIENT INFORMATION; PICTURE ARCHIVING AND COMMUNICATION SYSTEM; RESEARCH ETHICS; RISK BENEFIT ANALYSIS; SECONDARY USE; TRANSCRIPTOMICS;

EID: 77955514675     PISSN: 01692607     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cmpb.2009.12.001     Document Type: Article

References (73)

1. American Medical Informatics Association (AMIA), A Taxonomy of Secondary Uses and Re-Uses of Healthcare Data, 2007 Invitational Conference on Secondary Use of Health Data, September 2007. Available online at: (last accessed 21 October 2009). http://www.amia.org/inside/initiatives/healthdata/2007/index.asp.
2. Rajasekaran H., Hasselmeyer P., Lo Iacono L., Fingberg J., Summers P., Benkner S., Engelbrecht G., Arbona T., Chiarini A., Friedrich C.M., Hofmann-Apitius M., Moore B., Bijlenga P., Iavindrasana J., Müller H., Hose R.D., Dunlop R., Frangi A., Kumpf K. @neurIST-towards a system architecture for advanced disease management through integration of heterogeneous data, computing, and complex processing services. Proceedings of 21 IEEE International Symposium on Computer-Based Medical Systems 2008 June 2008.
3. Feigin V.L., Lawes C.M., Bennett D.A., Anderson C.S. Stroke epidemiology: a review of population-based studies of incidence, prevalence, and case-fatality in the late 20th century. Lancet Neurol. 2003, 2(1):43-53.
4. Feigin V.L., Rinkel G.J., Lawes C.M., Algra A., Bennett D.A., van Gijn J., et al. Risk factors for subarachnoid hemorrhage: an updated systematic review of epidemiological studies. Stroke 2005, 36(12):2773-2780.
5. Schievink W.I. Intracranial aneurysms. N. Engl. J. Med. 1997, 336(1):28-40.
6. Suarez J.I., Tarr R.W., Selman W.R. Aneurysmal subarachnoid hemorrhage. N. Engl. J. Med. 2006, 354(4):387-396.
7. Iavindrasana J., Depeursinge A., Ruch P., Spahni S., Geissbuhler A., Müller H. Design of a decentralized reusable research database architecture to support data acquisition in large research projects. Stud. Health Technol. Inform. 2007, 129:325-329.
8. Dunlop R., Arbona A., Rajasekaran H., Lo Iacono L., Fingberg J., Summers P., Benkner S., Engelbrecht G., Chiarini A., Friedrich C.M., Moore B., Bijlenga P., Iavindrasana J., Hose R.D., Frangi A.F. @neurIST-chronic disease management through integration of heterogeneous data and computer-interpretable guideline services. Proceedings of HealthGrid June 2008.
9. The Association of Electrical and Medical Imaging Equipment Manufacturers (NEMA), DICOM Part 3: Information Object Definitions. PS 3.3-2008. Available at: (last accessed 21 October 2009). ftp://medical.nema.org/medical/dicom/2008/08_03pu.pdf.
10. European Parliament and Council, Directive 95/46/EC of the European Parliament and of the Council of October 24, 1995 on the Protection of Individuals with Regard to the Processing of Personal Data and on the Free Movement of Such Data, Off. J. Eur. Commun. No. L. 281/31 (1995).
11. Article 29 Working Party, Opinion No. 4/2007 on the concept of personal data, WP 136 (2007).
12. Knoppers B., Saginur M. Correspondence: the Babel of genetic data terminology. Nat. Biotechnol. 2005, 23(8):925-927.
13. International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC), Technical Standard on Health Informatics: Pseudonymisation Practices for the Protection of Personal Health Information and Health Related Services, ISO/TS 25237 (2008).
14. A. Pfitzmann, M. Hansen, Anonymity, Unlinkability, Undetectability, Unobservability, Pseudonymity, and Identity Management-A Consolidated Proposal for Terminology, February 2008. Available online at: (last accessed 21 October 2009). http://dud.inf.tu-dresden.de/Anon_Terminology.shtml.
15. World Health Organization (European Partnership on Patients' Rights and Citizens' Empowerment), Genetic Databases, Assessing and the Impact on Human Rights and Patient Rights, World Health Organization, Geneva, 2003.
16. Swiss Academy of Medical Sciences Biobanks: obtainment, preservation and utilisation of human biological material-medical-ethical guidelines and recommendations. Journal of International Biotechnology Law 2007, 4(5):210-214.
17. Human Genetics Commission, Whose hands on your genes? A discussion document on the storage protection and use of personal genetic information, Human Genetics Commission, London, 2000. Available online at: (last accessed 21 October 2009). http://www.hgc.gov.uk/UploadDocs/DocPub/Document/business_consultations%202maintext.pdf.
18. European Parliament and the Council, Directive 2001/20/EC relating to the implementation of good clinical practice in the conduct of clinical trials on medicinal products for human use, Off. J. Eur. Commun. L121/34 (2001).
19. World Medical Association (WMA), Declaration of Helsinki-Ethical Principles for Medical Research Involving Human Subjects (WMA General Assembly, Seoul, October 2008). Available online at: (last accessed 3 August 2009). http://www.wma.net/en/30publications/10policies/b3/index.html.
20. Council of Europe, Additional Protocol to the Convention on Human Rights and Biomedicine, Concerning Biomedical Research, ETS 195 (2005).
21. Council of Europe Committee of Ministers, Recommendation No. R (97) 5 of the Committee of Ministers to Member States on the Protection of Medical Data (1997).
22. Council of Europe Committee of Ministers, Recommendation Rec(2006)4 of the Committee of Ministers to member states on research on biological materials of human origin. Available online at: (last accessed 21 October 2009). https://wcd.coe.int/ViewDoc.jsp%3Fid=977859.
23. Council for International Organizations of Medical Sciences (CIOMS), International Ethical Guidelines for Biomedical Research Involving Human Subjects, CIOMS, Geneva, 2002. Available online at: (last accessed 21 October 2009). http://www.cioms.ch/frame_guidelines_nov_2002.htm.
24. OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data 1980, OECD, Paris.
25. See The Data Protection Directive and Medical Research Across Europe 2005, Ashgate Publishing Ltd., Aldershot. D. Beyleveld, D. Townend, S. Rouillé-Mirza, J. Wright (Eds.).
26. Medical Research Council (MRC) (UK) Human Tissue and Biological Samples for use in Research-Operational and Ethical Guidelines 2001, MRC, London.
27. Zika E., Schulte In den Baumen T., Kaye J., Brand A., Ibarreta D. Sample, data use and protection in biobanking in Europe: legal issues. Pharmacogenomics 2008, 9(6):773-781.
28. Da Rocha A.C., Seoane J.A. Alternative consent models for biobanks: the new Spanish law on biomedical research. Bioethics 2008, 22(8):440-447.
29. Nys H., Fobelets G. The regulation of biobanks in Spain. Law Hum. Genome Rev. 2008, 29:169-188.
30. Seoane J.A., Da Rocha A.C. Consentimiento, biobancos y ley de investigacion biomedica. Law Hum. Genome Rev. 2008, 29:131-148.
31. Clark B.J. Tissue banking in a regulated environment-does this help the patient? Part 1. Legislation, regulation and ethics in the UK. Pathobiology 2007, 74(4):218-222.
32. Swiss Federal Law on Genetic Analysis of Human Beings (Loi fédérale sur l'analyse génétique humaine) (8.10.2004). Available online at: (last accessed 21 October 2009). http://www.admin.ch/ch/f/rs/810_12/index.html.
33. Council of Europe, Convention for the Protection of Human Rights and Dignity of the Human Being with regard to the Application of Biology and Medicine (Convention on Human Rights and Biomedicine) Oviedo, ETS 164 (1997).
34. L. Sweeney, Uniqueness of Simple Demographics in the U.S. Population, Carnegie Mellon University Laboratory for International Data Privacy, Pittsburgh, 2000. Available online at: (last accessed 21 October 2009). http://privacy.cs.cmu.edu/dataprivacy/papers/LIDAP-WP4abstract.html.
35. National Institutes for Health (US), De-identifying Protected Health Information Under the Privacy Rule, 2007. Available online at: (last accessed 21 October 2009). http://privacyruleandresearch.nih.gov/pr_08.asp%238a.
36. Medical Research Council (MRC) (UK) Personal Information in Medical Research 2003, MRC, London.
37. Lunshof J.E., Chadwick R., Vorhaus D.B., Church G.M. From genetic privacy to open consent. Nat. Rev. Genet. 2008, 9:406-411.
38. OECD Guidelines for Human Biobanks and Genetic Research Databases, OECD, Paris, 2009.
39. UK Data Protection Act, Chapter 29, Office of Public Sector Information, London, 1998.
40. Pommerening K., Reng M. Secondary use of the electronic health record via pseudonymisation. Medical Care Compunetics 2004, vol. 1:441-446. IOS Press, Amsterdam.
41. European Agency for the Evaluation of Medical Products (EMEA) Committee for Proprietary Medicinal Products, Position Paper on Terminology in Pharmacogenomics (EMEA, London, 2002) 4.
42. Gulcher J.R., Kristjánsson K., Gudbjartsson H., Stefánsson K. Protection of privacy by third-party encryption in genetic research in Iceland. Eur. J. Hum. Genet. 2000, 8(10):739-742.
43. International Subarachnoid Aneurysm Trial (ISAT) of neurosurgical clipping versus endovascular coiling in 2143 patients with ruptured intracranial aneurysms: a randomised trial. Lancet 2002, 360:1267-1274. ISAT Trial Collaborative Group.
44. Kulynych J., Korn D. The effect of the new federal medical-privacy rule on research. N. Engl. J. Med. 2002, 346(3). pp. 201-4, 202.
45. Annas G.J. Medical privacy and medical research-judging the new federal regulations. N. Engl. J. Med. 2002, 346(3). pp. 216-20, 217.
46. Stirling A., et al. On Science and Precaution in the Management of Technological Risk 1999, The EC Joint Research Centre (JRC), Institute for Prospective Technological Studies, Seville.
47. Information Commissioner (UK) Privacy Impact Assessment (PIA) Handbook (version 2) 2009, Information Commissioner's Office, Wilmslow.
48. Malin B., Sweeney L. How (not) to protect genomic data privacy in a distributed network: using trail re-identification to evaluate and design anonymity protection systems. J. Biomed. Inform. 2004, 37:179-192.
49. Common Criteria, The Common Criteria for Information Technology Security Evaluation v3.1, July 2009. Available online at: (last accessed 21 October 2009). http://www.commoncriteriaportal.org/.
50. Hunter P., Smith N., Fernandez J., Tawhai M. Integration from proteins to organs: the IUPS Physiome Project. Mech. Ageing Dev. 2005, 126(1):187-192.
51. Hanser S., Boeker M., Kumpf K., Bijlenga P., Schulz S. Design of an ontology on cerebral aneurysms: representing the conceptual space of the @neurIST project. Proceedings of MedInfo 2007.
52. NEMA, DICOM Supplement 55: Attribute Level Confidentiality (including De-identification), February 2000. Available online at: (last accessed 21 October 2009). http://medical.nema.org/Dicom/supps/sup55_03.pdf.
53. Noumeir R., Lemay A., Lina J.M. Pseudonymisation of radiology data for research purposes. J. Digit. Imaging 2006, 20:284-295.
54. Ruch P., Baud R.H., Rassinoux A.M., Bouillon P., Robert G. Medical document anonymization with a semantic lexicon. Proceedings of AMIA Symp. 2000, 729-733.
55. Kamauu A.W., Duvall S.L., Avrin D.E. Using Java to generate globally unique identifiers for DICOM objects. J. Digit. Imaging 2007.
56. Burton A.M., Wilson S., Cowan M., Bruce V. Face recognition in poor-quality video: evidence from security surveillance. Psychol. Sci. 1999, 10:243-248.
57. Bischoff-Grethe A., Ozyurt I.B., Busa E., Quinn B.T., Fennema-Notestine C., Clark C.P., Morris S., Bondi M.W., Jernigan T.L., Dale A.M., Brown G.G., Fischl B. A technique for the deidentification of structural brain MR images. Hum. Brain Mapp. 2007, 28(9):892-903.
58. L. Lo Iacono, Multi-centric Universal Pseudonymisation for Secondary Use of the EHR, in HealthGrid, Geneva, Switzerland, 2007.
59. Menezes A.J., van Oorschot P.C., Vanstone S.A. Handbook of Applied Cryptography 1996, CRC Press, Florida.
60. Lovis C., Spahni S., Cassoni-Schoellhammer N., Geissbuhler A. Comprehensive management of the access to a component-based healthcare information system. Stud. Health Technol. Inform. 2006, 124:251-256.
61. Geissbuhler A., Lovis C., Lamb A., Spahni S. Experience with an XML/http-based federative approach to develop a hospital-wide clinical information system. Medinfo 2001, 10:735-739.
62. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, H. Granqvist (Eds.), WS-Trust 1.3 OASIS Standard, March 2007. Available online at: (last accessed 21 October 2009). http://docs.oasis-open.org/ws-sx/ws-trust/200512.
63. S. Cantor, J. Kemp, R. Philpott, E. Maler (Eds.), Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) Version 2.0 OASIS Standard, March 2005. Available online at: (last accessed 21 October 2009). http://saml.xml.org/saml-specifications.
64. A. Nadalin, C. Kaler, R. Monzillo, P. Hallam-Baker, Web Services Security: SOAP Message Security 1.1 OASIS Standard Specification, February 2006.
65. T. Moses (Ed.), Extensible Access Control Markup Language (XACML) Version 2.0 OASIS Standard, February 2005. Available online at: (last accessed 21 October 2009). http://www.oasis-open.org/committees/tc_home.php%3Fwg_abbrev=xacml.
66. Rebbeck T.R., Sankar P. Ethnicity, ancestry, and race in molecular epidemiologic research. Cancer Epidemiol. Biomarkers Prev. 2005, 14:2467-2471.
67. Iavindrasana J, Lo Iacono L., Müller H., Periz I., Summers P., Wright J. Access to clinical information systems for research in the life sciences: security and privacy considerations. Proceedings of HealthGrid 2008.
68. S. Bakhtiari, R. Safavi-Naini, J. Pieprzyk, Keyed hash functions, in: E. Dawson and J. Golic (Eds.), Cryptography: Policy and Algorithms, Lecture Notes in Computer Science, vol. 1029, 1996, pp. 201-214.
69. Pommerening K., Miller M., Schmidtmann I., Michaelis J. Pseudonyms for cancer registry. Methods Inf. Med. 1996, 35:112-121.
70. D. Kalra, P. Singleton, D. Ingram, J. Milan, J. MacKay, D. Detmer, A. Rector, Security and confidentiality approach for the Clinical E-Science Framework (CLEF), in Second UK E-Science All Hands Meeting, Nottingham, UK, 2003.
71. N. Zhang, A. Rector, I. Buchan, Q. Shi, D. Kalra, J. Rogers, C. Goble, S. Walker, D. Ingram, P. Singleton, A linkable identity privacy algorithm for healthgrid, in: T. Solomonides, R. McClatchey, V. Breton, Y. Legré, S. Nørager (Eds.), Proceedings of Healthgrid 2005, Studies in Health Technology and Informatics, vol. 112, 2005.
72. Clarke M. Systematic review of reviews of risk factors for intracranial aneurysms. Neuroradiology 2008, 50(August (8)):653-664.
73. Uzuner Ö., Luo Y., Szolovits P. Evaluating the state-of-the-art in automatic de-identification. J. Am. Med. Inform. Assoc. 2007, 14(September-October (5)):550-563.