Strategies for de-identification and anonymization of electronic health record data for use in multicenter research studies

Medical Care

Volumn 50, Issue SUPPL. 1, 2012, Pages

  Kushida, Clete A ^a   Nichols, Deborah A ^a   Jadrnicek, Rik ^b   Miller, Ric ^c   Walsh, James K ^d   Griffin, Kara ^d  

^a STANFORD UNIVERSITY MEDICAL CENTER   (United States)

^b Microflow DBMS Inc   (United States)

^c Microflow DBMS Inc   (United States)

^d Sleep Medicine and Research Center   (United States)

Author keywords

Anonymization; De identification; Electronic health record

Indexed keywords

ARTICLE; BIOSIS; CINAHL; CLINICAL DATA REPOSITORY; COMPUTER ASSISTED TOMOGRAPHY; CONSULTATION; CYTOLOGY; DATA ANALYSIS; DATA PROCESSING; DENTAL SURGERY; ECHOGRAPHY; ELECTRONIC MEDICAL RECORD; HOSPITAL DISCHARGE; HUMAN; IMMUNOLOGICAL MONITORING; INFECTION; INTENSIVE CARE UNIT; LABORATORY TEST; LEARNING; MAXILLOFACIAL SURGERY; MEDICAL RECORD REVIEW; MEDICAL RESEARCH; MEDLINE; MULTICENTER STUDY (TOPIC); NOMENCLATURE; NUCLEAR MAGNETIC RESONANCE IMAGING; NUTRITION; ONCOLOGY; PHOTOGRAPHY; PRIORITY JOURNAL; SAMPLING; STATISTICAL ANALYSIS; STRATEGIC PLANNING; SYSTEMATIC REVIEW; THORAX RADIOGRAPHY; ULTRASOUND;

COMPUTER SECURITY; CONFIDENTIALITY; ELECTRONIC HEALTH RECORDS; HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT; HUMANS; MULTICENTER STUDIES AS TOPIC; SOFTWARE; UNITED STATES;

EID: 84862293738     PISSN: 00257079     EISSN: 15371948     Source Type: Journal    
DOI: 10.1097/MLR.0b013e3182585355     Document Type: Article

References (50)

1. Sweeney L. Computational Disclosure Control: A Primer on Data Privacy Protection. Cambridge, MA: Massachusetts Institute of Technology; 2001.
2. Neamatullah I, Douglass MM, Lehman LW, et al. Automated deidentification of free-text medical records. BMC Med Inform Decis Mak. 2008;8:32-47.
3. Sweeney L. Replacing personally-identifying information in medical records, the scrub system. In: Cimino JJ, ed. Beyond the Superhighway: Exploiting the Internet with Medical Informatics. Proc AMIA Annu Fall Symp. Washington, DC; 1996:333-337.
4. Ruch P, Baud RH, Rassinoux AM, et al. Medical document anonymization with a semantic lexicon. In: Overhage JM, ed. Converging Information, Technology, and Health Care. Proc AMIA Symp. Los Angeles, CA; 2000:729-733.
5. Miller R, Boitnott JK, Moore GW. Web-based free-text query system for surgical pathology reports with automatic case de-identification. Advancing Pathology Informatics, Imaging, and the Internet (APIII 2000). Arch Pathol Lab Med. 2001;125:1011.
6. Taira RK, Bui AA, Kangarloo H. Identification of patient name references within medical documents using semantic selectional restrictions. Proc AMIA Symp. 2002;757-761.
7. Thomas SM, Mamlin B, Schadow G, et al. A successful technique for removing names in pathology reports using an augmented search and replace method. In: Kohane IS, ed. Biomedical Informatics: One Discipline. Proc AMIA Symp. San Antonio, TX; 2002:777-781.
8. Berman JJ. Concept-match medical data scrubbing. How pathology text can be used in research. Arch Pathol Lab Med. 2003;127:680-686. (Pubitemid 36613219)
9. Douglass M, Clifford GD, Reisner A, et al. Computer-assisted deidentification of free text in the MIMIC II database. In: Murray A, ed. Computers in Cardiology. Chicago, IL: American Society for Clinical Pathology; 2004:341-344. (Pubitemid 41696133)
10. Gupta D, Saul M, Gilbertson J. Evaluation of a de-identification (De-Id) software engine to share pathology reports and clinical documents for research. Am J Clin Pathol. 2004;121:176-186. (Pubitemid 38140121)
11. Fielstein EM, Brown SH, Speroff T. Algorithmic de-identification of VA medical exam text for HIPAA privacy compliance: preliminary findings. In: Fieschi M, ed. MEDINFO 2004. Amsterdam: IOS Press; 2004:1590.
12. Douglass MM, Cliffford GD, Reisner A, et al. De-identification algorithm for free-text nursing notes. Computers in Cardiology. Lyon, France: Institute of Electrical and Electronics Engineers; 2005: 331-334. (Pubitemid 46276666)
13. Sweeney JP, Portell KS, Houck JA, et al. Patient note de-identification using a find-and-replace iterative process. J Healthc Inf Manag. 2005; 19:65-70.
14. Aramaki E, Imai T, Miyo K, et al. Automatic de-identification by using sentence features and label consistency. i2b2 Workshop on Challenges in Natural Language Processing for Clinical Data, 2006.
15. Beckwith BA, Mahaadevan R, Balis UJ, et al. Development and evaluation of an open source software tool for de-identification of pathology reports. BMC Med Inform Decis Mak. 2006;6:12-21.
16. Dorr DA, Phillips WF, Phansalkar S, et al. Assessing the difficulty and time cost of de-identification in clinical narratives. Methods Inf Med. 2006;45:246-252. (Pubitemid 44047726)
17. Guo Y, Gaizauskas R, Roberts I, et al. Identifying personal health information using support vector machines. i2b2 Workshop on Challenges in Natural Language Processing for Clinical Data, 2006.
18. Hara K. Applying a SVM based chunker and a text classifier to the Deid Challenge. i2b2 Workshop on Challenges in Natural Language Processing for Clinical Data, 2006.
19. Pestian JP, Itert L, Andersen C, et al. Preparing clinical text for use in biomedical research. J Database Manage. 2006;17:1-11. (Pubitemid 43991925)
20. Sibanda TC. Was the patient cured? Understanding semantic categories and their relationships in patient records. Electr Eng Comput Sci. Boston, MA: Massachusetts Institute of Technology; 2006:107.
21. Sibanda T, He T, Szolovits P, et al. Syntactically-informed semantic category recognition in discharge summaries. AMIA Annu Symp Proc. 2006;714-718.
22. Szarvas G, Farkas R, Busa-Fekete R. State-of-the-art anonymization of medical records using an iterative machine learning framework. J Am Med Inform Assoc. 2007;14:574-580. (Pubitemid 47379570)
23. Wellner B, Huyck M, Mardis S, et al. Rapidly retargetable approaches to de-identification in medical records. J Am Med Inform Assoc. 2007;14:564-573. (Pubitemid 47379573)
24. Friedlin FJ, McDonald CJ. A software tool for removing patient identifying information from clinical documents. J Am Med Inform Assoc. 2008;15:601-610.
25. Gardner J, Xiong L. HIDE: an integrated system for Health Information De-identification. Computer-Based Medical Systems, 2008 CBMS'08 21st IEEE International Symposium on Computer-Based Medical Systems. Jyvaskyla, Finland; 2008.
26. Uzuner O, Sibanda TC, Luo Y, et al. A de-identifier for medical discharge summaries. Artif Intell Med. 2008;42:13-35.
27. Grouin C, Rosier A, Dameron O, et al. Testing tactics to localize deidentification. Stud Health Technol Inform. 2009;150:735-739.
28. Morrison FP, Li L, Lai AM, et al. Repurposing the clinical record: can an existing natural language processing system de-identify clinical notes? J Am Med Inform Assoc. 2009;16:37-39.
29. Morrison FP, Sengupta S, Hripcsak G. Using a pipeline to improve de-identification performance. AMIA Annu Symp Proc. 2009;2009: 447-451.
30. Velupillai S, Dalianis H, Hassel M, et al. Developing a standard for deidentifying electronic patient records written in Swedish: precision, recall and F-measure in a manual and computerized annotation trial. Int J Med Inform. 2009;78:e19-e26.
31. Aberdeen J, Bayer S, Yeniterzi R, et al. The MITRE Identification Scrubber Toolkit: design, training, and assessment. Int J Med Inform. 2010;79:849-859.
32. Huang LC, Chu HC, Lien CY, et al. Embedding a hiding function in a portable electronic health record for privacy preservation. J Med Syst. 2010;34:313-320.
33. Dalianis H, Velupillai S. De-identifying Swedish clinical text-refinement of a gold standard and experiments with conditional random fields. J Biomed Semantics. 2010;1:6-15.
34. Tu K, Klein-Geltink J, Mitiku TF, et al. De-identification of primary care electronic medical records free-text data in Ontario, Canada. BMC Med Inform Decis Mak. 2010;10:35-41.
35. Yeniterzi R, Aberdeen J, Bayer S, et al. Effects of personal identifier resynthesis on clinical text de-identification. J Am Med Inform Assoc. 2010;17:159-168.
36. Bischoff-Grethe A, Ozyurt IB, Busa E, et al. A technique for the deidentification of structural brain MR images. Hum Brain Mapp. 2007;28:892-903. (Pubitemid 47581346)
37. Bland PH, Laderach GE, Meyer CR. A web-based interface for communication of data between the clinical and research environments without revealing identifying information. Acad Radiol. 2007;14: 757-764. (Pubitemid 46898202)
38. Onken M, Riesmeier J, Engel M, et al. Reversible anonymization of DICOM images using automatically generated policies. Stud Health Technol Inform. 2009;150:861-865.
39. Clark KW, Gierada DS, Marquez G, et al. Collecting 48,000 CT exams for the lung screening study of the National Lung Screening Trial. J Digit Imaging. 2009;22:667-680.
40. Gonzalez DR, Carpenter T, van Hemert JI, et al. An open source toolkit for medical imaging de-identification. Eur Radiol. 2010;20: 1896-1904.
41. Zhu Y, Singh PD, Siddiqui K, et al. An automatic system to detect and extract text in medical images for de-identification. In: Liu BJ, Boonn WW, eds. Medical Imaging 2010: Advanced PACS-based Imaging Informatics and Therapeutic Applications. San Diego, CA: International Society for Optics and Photonics; 2010.
42. Engelstad ME, McClellan M, Jacko JA, et al. De-identification of facial images using omposites. J Oral Maxillofac Surg. 2011;69: 3026-3031.
43. Gulcher JR, Kristjansson K, Gudbjartsson H, et al. Protection of privacy by third-party encryption in genetic research in Iceland. Eur J Hum Genet. 2000;8:739-742.
44. Hara K, Ohe K, Kadowaki T, et al. Establishment of a method of anonymization of DNA samples in genetic research. J Hum Genet. 2003;48:327-330. (Pubitemid 36834362)
45. Roden DM, Pulley JM, Basford MA, et al. Development of a large-scale de-identified DNA biobank to enable personalized medicine. Clin Pharmacol Ther. 2008;84:362-369.
46. Furuta K, Yokozawa K, Takada T, et al. De-identification procedure and sample quality of the post-clinical test samples at the bio-repository of the National Cancer Center Hospital (NCCH) in Tokyo. Jpn J Clin Oncol. 2011;41:295-298.
47. Sleator D, Temperley D. Parsing English With a Link Grammar. Technical Report CMU-CS-91-196. Pittsburgh, PA: Computer Science Department, Carnegie Mellon University; 1991.
48. Uzuner O, Luo Y, Szolovits P. Evaluating the state-of-the-art in automatic de-identification. J Am Med Inform Assoc. 2007;14:550-563. (Pubitemid 47379572)
49. Prior FW, Brunsden B, Hildebolt C, et al. Facial recognition from volume-rendered magnetic resonance imaging data. IEEE Trans Inf Technol Biomed. 2009;13:5-9.
50. Mayer J, Shen S, South BR, et al. Inductive creation of an annotation schema and a reference standard for de-identification of VA electronic clinical notes. AMIA Annu Symp Proc. 2009;2009: 416-420.