Share: System design and case studies for statistical health information release

Journal of the American Medical Informatics Association

Volumn 20, Issue 1, 2013, Pages 109-116

  Gardner, James ^a   Xiong, Li ^b,c   Xiao, Yonghui ^b   Gao, Jingjing ^b   Post, Andrew R ^b,c   Jiang, Xiaoqian ^d   Ohno Machado, Lucila ^d  

^a Digital Reasoning Systems Inc   (United States)

^b EMORY UNIVERSITY   (United States)

^c EMORY UNIVERSITY SCHOOL OF MEDICINE   (United States)

^d UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ARTICLE; CASE STUDY; COMPUTER PROGRAM; ELECTRONIC MEDICAL RECORD; EMORY ELECTRONIC MEDICAL RECORD DATASET; HISTOGRAM; INFORMATION PROCESSING; LONGITUDINAL STUDY; MEDICAL INFORMATION SYSTEM; PRIVACY; STATISTICAL HEALTH INFORMATION RELEASE; SURVEILLANCE EPIDEMIOLOGY AND END RESULT BREAST CANCER DATASET;

BREAST NEOPLASMS; COMPUTER GRAPHICS; CONFIDENTIALITY; ELECTRONIC HEALTH RECORDS; FEASIBILITY STUDIES; FEMALE; HUMANS; INFORMATION DISSEMINATION; INFORMATION STORAGE AND RETRIEVAL; LONGITUDINAL STUDIES; MEDICAL ORDER ENTRY SYSTEMS; ORGANIZATIONAL CASE STUDIES; SEER PROGRAM; SOFTWARE; UNITED STATES;

EID: 84871902175     PISSN: 10675027     EISSN: 1527974X     Source Type: Journal    
DOI: 10.1136/amiajnl-2012-001032     Document Type: Article

References (48)

1. Advisory C for USPIT, PITAC, (PITAC). President's Information Technology Advisory Committee. Revolutionizing health care through information technology. National Coordination Office for Information Technology Research and Development, 2004.
2. Stead WW, Lin HS, eds. Computational technology for effective health care: immediate steps and strategic directions. Committee on Engaging the Computer Science Research Community in Health Care Informatics; National Research Council. Washington DC: The National Academies Press, 2009.
3. Nass SJ, Levit LA, Gostin LO. Beyond the HIPAA privacy rule: enhancing privacy, improving health through research. Washington DC: National Academy Press, 2009.
4. Fung BCM, Wang K, Chen R, et al. Privacy-preserving data publishing: a survey of recent developments. ACM Computing Surveys 2010;42:1-534.
5. Malin B. An evaluation of the current state of genomic data privacy protection technology and a roadmap for the future. J Am Med Inform Assoc 2005;12:28-34.
6. Ohno-Machado L, Bafna C, Boxwala A, et al. iDASH. Integrating data for analysis, anonymization, and sharing. J Am Med Inf Assoc 2011;19:196-201. PMID: 22081224 PMCID: PMC3277627.
7. Meystre SM, Friedlin FJ, South BR, et al. Automatic de-identification of textual documents in the electronic health record: a review of recent research. BMC Med Res Methodol 2010;10:70.
8. Sweeney L. Replacing personally-identifying information in medical records, the scrub system. Proc AMIA Annu Fall Symp 1996;333-7.
9. Szarvas G, Farkas R, Busa-Fekete R. State-of-the-art anonymization of medical records using an iterative machine learning framework. J Am Med Inform Assoc 2007;14:574-80.
10. Uzuner OO, Luo Y, Szolovits P. Evaluating the state-of-the-art in automatic de-identification. J Am Med Inform Assoc 2007;14:550-63.
11. El Emam K, Jabbouri S, Sams S, et al. Evaluating common de-identification heuristics for personal health information. J Med Int Res 2006;8:e28.
12. El Emam K, Brown A, AbdelMalik P. Evaluating predictors of geographic area population size cut-offs to manage re-identification risk. J Am Med Inform Assoc 2009;16:256-66.
13. Benitez K, Malin B. Evaluating re-identification risks with respect to the HIPAA privacy rule. J Am Med Inform Assoc 2010;17:169-77.
14. El Emam K, Jonker E, Arbuckle L, et al. A systematic review of re-identification attacks on health data. PLoS One 2011;6:e28071.
15. Ohrn A, Ohno-Machado L. Using Boolean reasoning to anonymize databases. Artif Intell Med 1999;15:235-54. PMID: 10206109.
16. Sweeney L. K-anonymity: a model for protecting privacy. Int J Uncertainty, Fuzziness and Knowledge-based Syst 2002;10:557-70.
17. Ohno-Machado L, Silveira PS, Vinterbo S. Protecting patient privacy by quantifiable control of disclosures in disseminated databases. Int J Med Inf 2004;73:599-606. PMID: 15246040.
18. El Emam K, Dankar FK. Protecting privacy using k-anonymity. J Am Med Inform Assoc 2008;15:627-37.
19. Mohammed N, Fung BCMM, Hung PCKK, et al. Anonymizing healthcare data: a case study on the blood transfusion service. In: Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining-KDD '09. New York, USA: ACM Press, 2009:1285.
20. Malin B, Benitez K, Masys D. Never too old for anonymity: a statistical standard for demographic data sharing via the HIPAA privacy rule. J Am Med Inform Assoc 2011;18:3-10.
21. Emam KE, Paton D, Dankar F, et al. De-identifying a public use microdata file from the Canadian national discharge abstract database. BMC Med Inform Decis Making 2011;11:53.
22. El Emam K, Arbuckle L, Koru G, et al. De-identification methods for open health data: the case of the heritage health prize claims dataset. J Med Int Res 2012;14:e33.
23. Dwork C. Differential privacy. Int Colloquium on Automata, Languages and Programming 2006;4052:1-12.
24. Dwork C. Differential privacy: a survey of results. In: Agrawal M, Du DZ, Duan Z, et al., eds. TAMC, volume 4978 of Lecture Notes in Computer Science. Xi'an, China: Springer, 2008:1-19.
25. Dwork C. A firm foundation for private data analysis. Commun ACM 2011;54.
26. McSherry FD. Privacy integrated queries: an extensible platform for privacy-preserving data analysis. In: Proceedings of the 35th SIGMOD international conference on Management of data (SIGMOD '09); 19-30. Binnige C, Dageville B, eds. New York, NY, USA: ACM, 2009. doi:10.1145/1559845.1559850 http://doi.acm.org/10.1145/1559845.1559850
27. McSherry F. Privacy integrated queries: an extensible platform for privacy-preserving data analysis. Commun ACM 2010;53:89-97. http://doi.acm.org/10.1145/1810891.1810916
28. Vinterbo S, Sarwate A, Boxwala A. Protecting count queries in study design. J Am Med Inform Assoc Published Online First: 17 Apr 2012. doi:10.1136/amiajnl-2011-000459.
29. Dwork C, Naor M, Reingold O, et al. On the complexity of differentially private data release: efficient algorithms and hardness results. In: Proceedings of the 41st annual ACM symposium on Symposium on theory of computing-STOC '09. New York, NY, USA: ACM Press, 2009:381.
30. Dankar F, Emam KE. The application of differential privacy to health data. In: EDBT/ ICDT 2012 Joint Conference. Berlin, Germany, 2012:1-9.
31. Gardner J, Xiong L. HIDE: an integrated system for health information DE-identification. 2008 21st IEEE International Symposium on Computer-Based Medical Systems. IEEE, 2008:254-9.
32. Gardner J, Xiong L, Li K, et al. HIDE: heterogeneous information DE-identification. In: Proceedings of the 12th International Conference on Extending Database Technology Advances in Database Technology-EDBT '09. New York, NY, USA: ACM Press, 2009:1116-19.
33. Gardner J, Xiong L. An integrated framework for de-identifying unstructured medical data. Data Knowledge Eng 2009;68:1441-51.
34. Gardner JJ, Xiong L, Wang F, et al. An evaluation of feature sets and sampling techniques for de-identification of medical records. The 1st ACM International Health Informatics Symposium (IHI). 2010:1-8.
35. Lafferty JD, McCallum A, Pereira FCN. Conditional random fields: Probabilistic models for segmenting and labeling sequence data. In: Proceedings of the 18th International Conference on Machine Learning. San Francisco, CA, USA: Morgan Kaufmann, 2001:282-9.
36. Okazaki N. CRFsuite: a fast implementation of Conditional Random Fields (CRFs). 2007. http://www.chokkan.org/software/crfsuite/ (accessed June 2008).
37. Jurczyk P, Lu JJ, Xiong L, et al. FRIL: a tool for comparative record linkage. AMIA Annu Symp Proc. 2008:440-4.
38. Xiao Y, Xiong L, Yuan C. Differentially private data release through multidimensional partitioning. Secure Data Manag 2011;6358:150-68.
39. Xiao Y, Gardner J, Xiong L. DPCube: Releasing Differentially Private Data Cubes for Health Information. In 28th IEEE International Conference on Data Engineering (ICDE), 2012.
40. Poosala V, Haas PJ, Ioannidis, et al. Improved histograms for selectivity estimation of range predicates. In: Proceedings of the 1996 ACM SIGMOD international conference on Management of data (SIGMOD '96), ACM, 1996:294-305.
41. Hay M, Rastogi V, Miklau G, et al. Boosting the Accuracy of Differentially-Private Histograms Through Consistency. In: Proceedings of the International Conference on Very Large Data Bases; 2009:3:15.
42. Chen R, Mohammed N, Fung BCM, et al. Publishing set-valued data via differential privacy. Proceedings of the VLDB Endowment 2011;4:1087-98.
43. Chen R, Fung BCM, Desai BC, et al. Differentially private transit data publication: A case study on the montreal transportation system. In: Proceedings of the 18th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (SIGKDD); August 2012, ACM Press: Beijing, China.
44. Surveillance, Epidemiology, and End Results (SEER) Program (www.seer.cancer.gov) Research Data (1973-2009), National Cancer Institute, DCCPS, Surveillance Research Program, Surveillance Systems Branch, released April 2011.
45. Hayy M, Rastogiz V, Miklauy G, et al. Boosting the accuracy of differentially-private histograms through consistency. The 36th International Conference on Very Large Data Bases, 13-17 September 2010, Singapore. In: Proceedings of the VLDB Endowment, Vol 3, No 1.
46. Cormode G, Procopiuc M, Shen E, et al. Differentially private spatial decompositions. IEEE 28th International Conference on Data Engineering (ICDE 2012), Washington, DC, USA (Arlington, Virginia), 1-5 April 2012, IEEE Computer Society 2012.
47. Xiao Y, Xiong Fan L, et al. DPCube: differentially private histogram release through multidimensional partitioning. Eprint arXiv: 1202.5358.
48. Wu Y, Jiang X, Kim J, et al. Grid Binary LOgistic REgression (GLORE): building shared models without sharing data. J Am Med Inform Assoc 2012;19:758-64.