The application of differential privacy to health data

ACM International Conference Proceeding Series

Volumn , Issue , 2012, Pages 158-166

  Dankar, Fida Kamal ^a   El Emam, Khaled ^a  

^a CHILDREN S HOSPITAL OF EASTERN ONTARIO   (Canada)

Author keywords

Anonymity; De identification; Differential privacy; Microdata; Randomization

Indexed keywords

ANONYMITY; DE-IDENTIFICATION; DIFFERENTIAL PRIVACIES; MICRODATA; RANDOMIZATION;

HEALTH;

DATA PRIVACY;

EID: 84864133800     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2320765.2320816     Document Type: Conference Paper

References (47)

1. Abowd J.M., Vilhuber L., How Protective are Synthetic Data, PSD 2008.
2. Baig M., Li J., Jixie L, Cloning for Privacy Protection in Multiple Independent Data Publications, In Proceedings of ACM Conference on Information and Knowledge Management (CIKM), 2011.
3. th Symp PODS 2007.
4. th Annual ACM Aymposium on Theory of Computing, 2008.
5. Chen R., Mohammed N., Fung B.C.M., Desai B.C., Xiong L, Publishing Set-Valued Data via Differential Privacy, Proceedings of the VLDB Endowment, 2011.
6. Dalenius T., Towards a Methodology for Statistical Disclosure Control, Statistik Tidskrift, 1977.
7. Dinur I., Nissim K., Revealing Information while Preserving Privacy, PODS 2003.
8. Domingo-Ferrer J., Risk-Utility Paradigms for Statistical Disclosure Limitation: How to Think, But Not How to Act-Discussion: A Science of Statistical Disclosure Limitation?, International Statistical Review 2011.
9. rd Theory of Cryptography Conference, 2006.
10. Dwork C., Differential Privacy, ICALP 2006.
11. Dwork C, Differential Privacy, A Survey of Results, LNCS 4978, 2008.
12. st Annual ACM Symposium on Theory of Computing, 2009.
13. Dwork C., An Ad Omnia Approach to Defining and Achieving Private Data Analysis, PinKDD 2007.
14. El Emam K. Data Anonymization Practices in Clinical Research: A Descriptive Study. Health Canada, Access to Information and Privacy Division: Ottawa, 2006.
15. El Emam K. Overview of Factors Affecting the Risk of Reidentification in Canada. Access to Information and Privacy Division, Health Canada, 2006.
16. El Emam K. Practices for the Review of Data Requests and the Disclosure of Health Information by Health Ministries and Large Data Custodians. Health Information Privacy Group, Canada Health Infoway, 2010. Available from: [http://www.ehealthinformation.ca/documents/Practices-for-the-review-of-data- requests-June-2010-EN-FINAL.pdf]
17. El Emam K., Brown A., Abdelmalik P. Evaluating Predictors of Geographic Area Population Size Cutoffs to Manage Reidentification Risk. Journal of the American Medical Informatics Association, 16(2):256-266, 2009.
18. El Emam K., Dankar F., Vaillancourt R., Roffey T., Lysyk M. Evaluating patient re-identification risk from hospital prescription records. Canadian Journal of Hospital Pharmacy, 62(4):307-319, 2009.
19. El Emam K., Mercer J., Moreau K., Grava-Gubins I., Buckeridge D., Jonker E. Physician Privacy Concerns when Disclosing Patient Data for Public Health Purposes During a Pandemic Influenza Outbreak. BMC Public Health, 11:454, 2011.
20. El Emam K., Paton D., Dankar F., Koru G. De-identifying a Public Use Microdata File from the Canadian National Discharge Abstract Database. BMC Medical Informatics and Decision Making, 11(53), 2011.
21. El Emam K., Arbuckle L., Koru G., Gaudette L., Neri E., Rose S., Howard J., Gluck J. De-Identification Methods for Open Health Data: The Case of the Heritage Health Prize Claims Data Set. Journal of Medical Internet Research (to appear), 2012.
22. El Emam K, Jonker E, Fineberg A. The case for deidentifying personal health information. Social Sciences Research Network 2011; Available from: [http://papers.ssrn.com/abstract=1744038]
23. Feldman D., Fiat A., Kaplan H., Nissim K., Private Coresets, STOC 2009.
24. Fienberg S, Rinaldo A., Yang X., Differential Privacy and the Risk Utility Tradeoff for Multi-Dimensional Contingency Tables, PSD 2010.
25. Fienberg S.E., Slavkivic A.B., A Survey of Statistical Approaches to Preserving Confidentiality of Contingency Table Entries, in:Aggrawal, C., Yu, P.S. (eds.) Privacy Preserving Data Mining, Springer, Heidelberg, 2008.
26. Friedman A., Schuster A, Data Mining with Differential Privacy, KDD 2010.
27. Fung B.C.M., Wang K.,Yu P.S., Anonymizing Classification Data for Privacy Preservation, IEEE TKDE, 2007.
28. Gotz m., MachanavajjhalaA., Wang G., Xiao X., Gehrke J., Privacy in Search Logs, CoRR 2009.
29. Hardt M., Talwar K., On the Geometry of Differential Privacy, STOC 2010.
30. st FOCS, 2010
31. Inan, A., Kantarcioglu M., Ghinita G., Bertino E. Private Record Linkage Using Differential Privacy. EDBT, 2010.
32. Kasiviswanathan S. P., Smith A, A note on Differential Privacy Defining Resistance to Arbitrary Side Information, CORR 2008.
33. Kifer D., Machanavajjhala A., No Free Lunch in Data Privacy, In 30th ACM SIGMOD, 2011
34. Korolova A., Kenthapadi K., Mishra N., Ntoulas A., Releasing Search Queries and Clicks Privately, WWW 2009.
35. Li N., Qardaji W., Su D., Provably Private Data Anonymization: Or, k-Anonymity Meets Differential Privacy, Technical Report, Purdue University, 2011.
36. Li C., Hay M., Rastogi V., Miklau G., McGregor A., Optimizing Linear Counting Queries under Differential privacy, PODS 2010.
37. McSherry F., Talwar K., Mechanism Design via Differential Privacy, FOCS 07.
38. McSherry F., Mirinov I, Differentially Private Recommender Systems: Building Privacy into the Net. KDD 2009.
39. Mohammed N., Chen R., Fung B., Yu P., Differentially Private Data Release for Data Mining, KDD 2011.
40. Muralidhar K., Sarathy R., Does Differential Privacy Protect Terry Gross Privacy? Privacy in Statistical Databases, 2011.
41. Roth A, Roughgarden T., Interactive Privacy via the Median Mechanism, TOC 2010.
42. Sarathy R., Muralidhar K., Evaluating Laplace Noise Addition to Satisfy Differential Privacy for Numeric Data, Transactions on Data Privacy, 2011.
43. Xiao X., Wang G., Gehrke J., Differential Privacy via Wavelet Transforms, CoRR 2009.
44. Xiao X., Tao Y., Output Perturbation with Query Relaxation, PVLDB 2008.
45. Xiao Y., Xiong L., Yuan C., Differentially Private Data Release Through Multi-Dimensional Partitioning, VLDB workshop on SDM, 2010.
46. Yin M. http://blog.myplaceinthecrowd.org/2010/05/26/recap-andproposal- 955-the-statistically-insignificant-privacyguarantee/2010.
47. Zang H., Bolot J., Anonymization of Location Data Does not Work: A Large-Scale Measurement Study, MobiCom 2011.