Privacy technology to support data sharing for comparative effectiveness research: A systematic review

Medical Care

Volumn 51, Issue 8 SUPPL.3, 2013, Pages

  Jiang, Xiaoqian ^a   Sarwate, Anand D ^b   Ohno Machado, Lucila ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b TOYOTA TECHNOLOGICAL INSTITUTE AT CHICAGO   (United States)

Author keywords

comparative effectiveness research; data sharing; health privacy

Indexed keywords

ALGORITHM; ARTICLE; CLINICAL CLASSIFICATION; COMPARATIVE EFFECTIVENESS; CONCEPTUAL FRAMEWORK; CONTINGENCY TABLE; DATA MINING; DISEASE SURVEILLANCE; HUMAN; INFORMATION PROCESSING; MACHINE LEARNING; MEDICAL INFORMATION SYSTEM; NOISE; PRIORITY JOURNAL; PRIVACY; REPRODUCIBILITY; SYSTEMATIC REVIEW; WAVELET ANALYSIS;

COMPARATIVE EFFECTIVENESS RESEARCH; CONFIDENTIALITY; COOPERATIVE BEHAVIOR; DATABASES, BIBLIOGRAPHIC; HUMANS; SOFTWARE;

EID: 84879881221     PISSN: 00257079     EISSN: 15371948     Source Type: Journal    
DOI: 10.1097/MLR.0b013e31829b1d10     Document Type: Article

References (109)

1. Federal Coordinating Council for Comparative Effectiveness Research. Available at: http://www.hhs.gov/recovery/programs/cer/cerannualrpt. pdf. Accessed August 30, 2011.
2. Standards for privacy of individually identifiable health information. Final Rule, 45 CFR parts 160 and 164. Available at: http://www.hhs.gov/ocr/ privacy/hipaa/administrative/privacyrule/adminsimpregtext. pdf. Accessed February 20, 2012.
3. Benitez K, Loukides G, Malin BA. Beyond safe harbor: automatic discovery of health information de-identification policy alternatives. Paper presented at: The 1st ACM International Health Informatics Symposium, 2010.
4. Baumer D, Earp JB, Payton FC. Privacy of medical records: IT implications of HIPAA. ACM Computers and Society (SIGCAS). 2000; 30:40-47.
5. McGraw D. Why the HIPAA privacy rules would not adequately protect personal health records: Center for Democracy and Technology (CDT) brief, 2008. Available at: http://www.cdt.org/brief/why-hipaaprivacy- rules-would-not- adequately-protect-personal-health-records. Accessed February 20, 2012.
6. California HealthCare Foundation. National Consumer Health Privacy Survey. Oakland, CA: California HealthCare Foundation; 2005:1-5.
7. McGraw D. Building public trust in uses of Health Insurance Portability and Accountability Act de-identified data. J Am Med Inform Assoc. 2012;20:29-34.
8. Tacconelli E. Systematic reviews: CRD's guidance for undertaking reviews in health care. Lancet Infect Dis. 2010;10:1-232.
9. Murphy SN, Gainer V, Mendis M, et al. Strategies for maintaining patient privacy in i2b2. J Am Med Inform Assoc. 2011;18(suppl 1): 103-108.
10. Vinterbo SA, Sarwate AD, Boxwala AA. Protecting count queries in study design. J Am Med Inform Assoc. 2012;19:750-757.
11. Fefferman NH, O'Neil EA, Naumova EN. Confidentiality and confidence: is data aggregation a means to achieve both? J Public Health Policy. 2005;26:430-449. (Pubitemid 43003346)
12. Matthews GJ, Harel O. Data confidentiality: a review of methods for statistical disclosure limitation and methods for assessing privacy. Stat Surv. 2011;5:1-29.
13. Fayyoumi E, Oommen BJ. A survey on statistical disclosure control and micro-aggregation techniques for secure statistical databases. Softw Pract Exper. 2010;40:1161-1188.
14. Ohno-Machado L, Silveira P, Vinterbo S. Protecting patient privacy by quantifiable control of disclosures in disseminated databases. Int J Med Inf. 2004;73:599-606. (Pubitemid 38891513)
15. Ohrn A, Ohno-Machado L. Using Boolean reasoning to anonymize databases. Artif Intell Med. 1999;15:235-254. (Pubitemid 29136748)
16. Jiang X, Cheng S, Ohno-Machado L. Quantifying Record-Wise Data Privacy and Data Representativeness. Proceedings of the 2011 Workshop on Data Mining for Medicine and Healthcare. San Diego, CA: ACM; 2011:64-67.
17. Fung BCM, Wang K, Chen R, et al. Privacy-preserving data publishing. ACM Comput Surv. 2010;42:1-53.
18. Dwork C. Differential privacy: a survey of results. Theory Appl Models Comput. 2008;4978:1-19.
19. Bertino E, Lin D, Jiang W. A survey of quantification of privacy preserving data mining algorithms. Privacy Preserving Data Mining. 2008;34:183-205.
20. Zhao Y, Du M, Le J, et al. A survey on privacy preserving approaches in data publishing. Paper presented at: 2009 First International Workshop on Database Technology and Applications, 2009.
21. Sweeney L. k-anonymity: a model for protecting privacy. Int J Uncertainty Fuzziness Knowl Based Syst. 2002;10:557-570. (Pubitemid 35384857)
22. Sweeney L. Datafly: a system for providing anonymity in medical data. Paper presented at: Eleventh International Conference on Database Security XI: Status and Prospects, 1998, Chalkidiki, Greece.
23. Machanavajjhala A, Kifer D, Gehrke J, et al. l-diversity: privacy beyond k-anonymity. ACM Trans Knowl Discov Data (TKDD). 2007;1:1-47.
24. Li N, Li T, Venkatasubramanian S. t-closeness: privacy beyond k-anonymity and l-diversity. Paper presented at: The 23rd International Conference on Data Engineering (ICDE), 2007.
25. Xiao X, Tao Y. M-invariance: towards privacy preserving republication of dynamic datasets. Paper presented at: Proceedings of the 2007 ACM SIGMOD international conference on Management of data, 2007.
26. Cormode G, Srivastava D, Li N, et al. Minimizing minimality and maximizing utility: analyzing method-based attacks on anonymized data. Proc VLDB Endow. 2010;3:1045-1056.
27. Ganta SR, Kasiviswanathan SP, Smith A. Composition attacks and auxiliary information in data privacy. Paper presented at: Proceeding of the 14th ACM SIGKDD international conference on Knowledge discovery and data mining-KDD'082008; New York, NY.
28. Domingo-Ferrer J, Torra V. A Critique of k-Anonymity and Some of Its Enhancements: IEEE, 2008.
29. Wong RC-W, Fu AW-C, Wang K, et al. Anonymization-based attacks in privacy-preserving data publishing. ACM Trans Database Syst. 2009;34:1-46.
30. Wong RC-W, Fu AW-C, Wang K, et al. Can the utility of anonymized data be used for privacy breaches? ACM Transact Knowl Discov Data (TKDD). 2011;5:1-24.
31. Sacharidis D, Mouratidis K, Papadias D. k-anonymity in the presence of external databases. IEEE Trans Knowl Data Eng. 2010;22: 392-403.
32. Cormode G. Personal privacy vs. population privacy: learning to attack anonymization. Paper presented at: Proceedings of the 17th ACM SIGKDD international conference on Knowledge discovery and data mining, 2011, New York, NY.
33. Nergiz ME, Atzori M, Clifton C. Hiding the Presence of Individuals From Shared Databases. International Conference on Management of Data (SIGMOD). New York, NY: ACM Press; 2007:665-676.
34. Nergiz ME, Clifton C. d-presence without complete world knowledge. IEEE Trans Knowl Data Eng. 2010;22:868-883.
35. Muralidhar K, Sarathy R. Does differential privacy protect terry gross' privacy? Paper presented at: Proceedings of the 2010 international conference on Privacy in statistical databases, 2010, Corfu, Greece.
36. Domingo-Ferrer J, Mateo-Sanz JM. Practical data-oriented microaggregation for statistical disclosure control. IEEE Trans Knowl Data Eng. 2002;14:189-201. (Pubitemid 34198203)
37. Domingo-Ferrer J, Torra V. Ordinal, continuous and heterogeneous k-anonymity through microaggregation. Data Mining Knowl Discov. 2005;11:195-212. (Pubitemid 41476765)
38. Bayardo RJ, Agrawal R. Data privacy through optimal k-anonymization. Paper presented at: The 21st International Conference on Data Engineering (ICDE), 2005.
39. Aggarwal G, Feder T, Kenthapadi K, et al. Anonymizing tables. Database Theory ICDT 2005. 2005;3363:246-258.
40. Chi-Wing R, Li J, AW-C Fu, et al. (a, k)-anonymity. Paper presented at: Proceedings of the 12th ACM SIGKDD international conference on Knowledge discovery and data mining-KDD'062006, New York, NY.
41. Ghinita G, Karras P, Kalnis P, et al. A framework for efficient data anonymization under privacy and accuracy constraints. ACM Trans Database Syst. 2009;34:1-47.
42. LeFevre K, DeWitt DJ, Ramakrishnan R. Mondrian Multidimensional K-Anonymity. Paper presented at: 22nd International Conference on Data Engineering (ICDE'06), 2006.
43. Friedman A, Wolff R, Schuster A. Providing k-anonymity in data mining. VLDB J. 2007;17:789-804.
44. LeFevre K, DeWitt DJ, Ramakrishnan R. Workload-aware anonymization techniques for large-scale datasets. ACM Trans Database Syst. 2008;33:1-47.
45. Zhang N, Zhao W. Privacy-preserving OLAP: an information-theoretic approach. IEEE Trans knowl Data Eng. 2011;23:122-138.
46. Narayanan A, Shmatikov V. Robust De-anonymization of Large Sparse Datasets. Paper presented at: 2008 IEEE Symposium on Security and Privacy (sp 2008), 2008.
47. Hansell S. Removes search data on vast group of web users. New York Times. 2006;8:C4.
48. Lasko TA, Vinterbo SA. Spectral anonymization of data. IEEE Trans Knowl Data Eng. 2010;22:437-446.
49. El Emam K, Dankar FK. Protecting privacy using k-anonymity. J Am Med Inform Assoc. 2008;15:627-627.
50. Fung BCM, Wang K, Chen R, et al. Privacy-preserving data publishing: a survey of recent developments. ACM Comput Surv (CSUR). 2009;42:1-53.
51. Fung BCM, Wang K, Wang L, et al. Privacy-preserving data publishing for cluster analysis. Data Knowl Eng. 2009;68:552-575.
52. El Emam K, Dankar FK, Issa R, et al. A globally optimal k-anonymity method for the de-identification of health data. J Am Med Inform Assoc. 2009;16:670-682.
53. Mohammed N, Fung BCM, Hung PCK, et al. Centralized and distributed anonymization for high-dimensional healthcare data. ACM Trans Knowl Discov Data. 2010;4:18:11-18:33.
54. Kifer D, Gehrke J. Injecting utility into anonymized datasets. Paper presented at: Proceedings of the 2006 ACM SIGMOD international conference on Management of data-SIGMOD'062006, New York, NY.
55. Ohno-Machado L, Vinterbo S, Dreiseitl S. Effects of data anonymization by cell suppression on descriptive statistics and predictive modeling performance. J Am Med Inform Assoc. 2002;9:115S-119S.
56. Gouweleeuw J, Kooiman P, Willenborg L, et al. Post randomisation for statistical disclosure control: theory and implementation. J Offical Stat. 1998;14:463-478.
57. Vinterbo SA, Sarwate AD, Boxwala A. Protecting count queries in cohort identification. Paper presented at: AMIA Summit on Clinical Research Informatics (CRI'11), 2011, San Francisco.
58. Barak B, Chaudhuri K, Dwork C, et al. Privacy, accuracy, and consistency too: a holistic solution to contingency table release. Paper presented at: Principles of Database Systems (PODS), 2007, Beijing.
59. Xiao X, Wang G, Gehrke J. Differential privacy via wavelet transforms. IEEE Trans Knowl Data Eng. 2011;23:1200-1214.
60. Mishra DK. Tutorial: Secure Multiparty Computation for Cloud Computing Paradigm. 2010 Second International Conference on Computational Intelligence, Modelling and Simulation: xxiv-xxv, 2010, Bali, Indonesia.
61. Lindell Y, Pinkas B. Secure multiparty computation for privacypreserving data mining. J Privacy Confidentiality. 2009;1:59-98.
62. Clifton C, Kantarcioglu M, Vaidya J. Privacy-Preserving Data Mining. New York, NY: Springer-Verlag; 2006.
63. Vaidya J, Yu H, Jiang X, et al. Privacy-preserving SVM classification. Knowl Inf Syst. 2008;14:161-178.
64. Wu Y, Jiang X, Kim J, et al. Grid LOgistic REgression (GLORE): building shared models without sharing data. J Am Med Inform Assoc. 2012;19:758-764.
65. Inan A, Kaya SV, Saygin Y, et al. Privacy preserving clustering on horizontally partitioned data. Data Knowl Eng. 2007;63:646-666. (Pubitemid 47418333)
66. Vaidya J, Clifton CW. Privacy preserving association rule mining in vertically partitioned data. Paper presented at: Proceedings of the Eighth ACMSIGKDD International Conference on Knowledge Discovery and Data Mining, 2002, Edmonton, Canada.
67. El Emam K, Hu J, Mercer J, et al. A secure protocol for protecting the identity of providers when disclosing data for disease surveillance. J Am Med Inform Assoc. 2011;18:212-212.
68. Xu Z, Yi X. Classification of privacy-preserving distributed data mining protocols. Paper presented at: The Sixth International Conference on Digital Information Management, 2011.
69. Zhan J. Privacy-preserving collaborative data mining. IEEE Comput Intell Mag. 2008;3:31-41. (Pubitemid 351606018)
70. Zhang Q, Koudas N, Srivastava D, et al. Aggregate query answering on anonymized tables. Paper presented at: The 23rd International Conference on Data Engineering (ICDE), 2007.
71. Nergiz ME, Tamersoy A, Saygin Y. Instant anonymization. ACM Trans Database Syst. 2011;36:1-33.
72. Dinur I, Nissim K. Revealing information while preserving privacy. Paper presented at: Proceedings of the twenty-second ACM SIGMODSIGACT- SIGART symposium on Principles of database systems, 2003, New York, NY.
73. Blum A, Dwork C, McSherry F, et al. Practical privacy: the SuLQ framework. Paper presented at: Proceedings of the twenty-fourth ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems, 2005, New York, NY.
74. Dwork C, McSherry F, Nissim K, et al. Calibrating noise to sensitivity in private data analysis. Paper presented at: Theory of Cryptography Conference (TCC), 2006, New York, NY.
75. Dwork C. Differential privacy. Automata, languages and programming. Springer: Berlin, Heidelberg: 2006:1-12.
76. Roth A, Roughgarden T. Proceedings of the 42nd ACM symposium on Theory of computing-STOC'102010.
77. McSherry F. Privacy integrated queries: an extensible platform for privacy-preserving data analysis. Commun ACM. 2010;53:89-89.
78. Friedman A, Schuster A. Data mining with differential privacy. Paper presented at: Proceedings of the 16th ACM SIGKDD international conference on Knowledge discovery and data mining (KDD'10), 2010, New York, NY.
79. Roy I, Setty STV, Kilzer A, et al. Airavat: Security and privacy for MapReduce. Paper presented at: Proceedings of the 7th USENIX conference on Networked systems design and implementation, 2010.
80. Chaytor R, Wang K, Brantingham P. Fine-Grain Perturbation for Privacy Preserving Data Publishing. Paper presented at: 2009 Ninth IEEE International Conference on Data Mining, 2009.
81. Wong R, Li J, Fu A, et al. (alpha, k)-anonymous data publishing. J Intell Inf Syst. 2009;33:209-234.
82. Jin X, Zhang M, Zhang N, et al. Versatile publishing for privacy preservation. Paper presented at: Proceedings of the 16th ACM SIGKDD international conference on Knowledge discovery and data mining (KDD), 2010, New York, NY.
83. Arasu A, Kaushik R, Li J. Data generation using declarative constraints. Paper presented at: Proceedings of the 2011 international conference on Management of data (SIGMOD 2011), 2011, New York, NY.
84. Cano I, Torra V. Generation of synthetic data by means of fuzzy c-Regression. Paper presented at: 2009 IEEE International Conference on Fuzzy Systems, 2009.
85. Domingo-Ferrer J, González-Nicolás U. Hybrid microdata using microaggregation. Inf Sci. 2010;180:2834-2844.
86. Hay M, Rastogi V, Miklau G, et al. Boosting the accuracy of differentially private histograms through consistency. VLDB Endow. 2010;3:1021-1032.
87. Barak B, Chaudhuri K, Dwork C, et al. Privacy, accuracy, and consistency too: a holistic solution to contingency table release. Paper presented at: Proceedings of the twenty-sixth ACM SIGMODSIGACT- SIGART symposium on Principles of database systems, 2007, New York, NY.
88. Kasiviswanathan SP, Rudelson M, Smith A, et al. The price of privately releasing contingency tables and the spectra of random matrices with correlated rows. Paper presented at: Proceedings of the 42nd ACM symposium on Theory of computing (STOC'10), 2010, New York, NY.
89. Li Y, Zhang Z, Winslett M, et al. Compressive Mechanism: Utilizing sparse representation in differential privacy. Paper presented at: The Workshop on Privacy in the Electronic Society (WPES), 2011, Chicago, IL.
90. Blum A, Ligett K, Roth A. A learning theory approach to noninteractive database privacy. Paper presented at: Proceedings of the 40th annual ACM symposium on Theory of computing, 2008, New York, NY.
91. Wasserman L, Zhou S. A statistical framework for differential privacy. J Am Stat Assoc. 2010;105:375-389.
92. Mohammed N, Chen R, Fung BCM, et al. Differentially private data release for data mining. Paper presented at: International Conference on Knowledge Discovery and Data Mining (SIGKDD), 2011, San Diego, CA.
93. Machanavajjhala A, Kifer D, Abowd J, et al. Privacy: Theory meets Practice on the Map. 2008 IEEE 24th International Conference on Data Engineering (ICDE). IEEE. 2008; Washington DC, USA: 277-286.
94. Tao Y, Chen H, Xiao X, et al. ANGEL: enhancing the utility of generalization for privacy preserving publication. IEEE Trans Knowl Data Eng. 2009;21:1073-1087.
95. Rastogi V, Suciu D, Hong S. The boundary between privacy and utility in data publishing. Paper presented at: The 33rd International Conference on Very Large Data Bases (VLDB), 2007.
96. Goldberger J, Tassa T. Efficient anonymizations with enhanced utility. Paper presented at: 2009 IEEE International Conference on Data Mining Workshops, 2009.
97. Domingo-Ferrer J, Rebollo-Monedero D. Measuring risk and utility of anonymized data using information theory. Paper presented at: Proceedings of the 2009 EDBT/ICDT Workshops on-EDBT/ICDT'092009, New York, NY.
98. Rebollo-Monedero D, Forné J, Soriano M. An algorithm for k-anonymous microaggregation and clustering inspired by the design of distortion-optimized quantizers. Data Knowl Eng. 2011;70: 892-921.
99. Malin BA, Sweeney LA. Determining the identifiability of DNA database entries. Proceedings AMIA Symposium. 2000; Los Angeles, CA: 537-541.
100. Malin BA. An evaluation of the current state of genomic data privacy protection technology and a roadmap for the future. J Am Med Inform Assoc. 2005;12:28-34. (Pubitemid 40038620)
101. Malin BA, Sweeney LA. How (not) to protect genomic data privacy in a distributed network: using trail re-identification to evaluate and design anonymity protection systems. J Biomed Inform. 2004;37:179-192.
102. Malin BA, Loukides G, Benitez K, et al. Identifiability in biobanks: models, measures, and mitigation strategies. Hum Genet. 2011;130: 383-392.
103. Malin BA, Sweeney LA. Inferring genotype from clinical phenotype through a knowledge based algorithm. Pac Symp Biocomput. 2002; Singapore: 41-52.
104. Chen R, Mohammed N, Fung BCM, et al. Publishing Set-Valued Data via Differential Privacy. The 37th International Conference on Very Large Data Bases (in press), 2011.
105. Wang K, Xu Y, RC-W Wong, et al. Anonymizing temporal data. Paper presented at: International Conference on Data Mining, 2010.
106. Szarvas G, Farkas R, Busa-Fekete R. State-of-the-art anonymization of medical records using an iterative machine learning framework. J Am Med Inform Assoc. 2007;14:574-580. (Pubitemid 47379570)
107. Gardner J, Xiong L, Li K, et al. HIDE: heterogeneous information DEidentification. Paper presented at: Proceedings of the 12th International Conference on Extending Database Technology Advances in Database Technology-EDBT'092009, New York, NY.
108. Li L, Wang JZ. DDIT-A tool for DICOM brain images de- Identification. The 5th International Conference on Bioinformatics and Biomedical Engineering (iCBBE). Wuhan, China. IEEE. 2011;1-4.
109. National Opinion Research Center. Available at: http://www.norc.org/ Pages/default.aspx. Accessed May 23, 2012.