Evaluating the risk of patient re-identification from adverse drug event reports

BMC Medical Informatics and Decision Making

Volumn 13, Issue 1, 2013, Pages

  El Emam, Khaled ^a,b   Dankar, Fida K ^a   Neisa, Angelica ^a   Jonker, Elizabeth ^a  

^a CHILDREN S HOSPITAL OF EASTERN ONTARIO   (Canada)

^b UNIVERSITY OF OTTAWA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

ARTICLE; CANADA; CONFIDENTIALITY; DRUG SURVEILLANCE PROGRAM; HUMAN; RISK ASSESSMENT; STANDARD;

ADVERSE DRUG REACTION REPORTING SYSTEMS; CANADA; CONFIDENTIALITY; HUMANS; RISK ASSESSMENT;

EID: 84884937952     PISSN: None     EISSN: 14726947     Source Type: Journal    
DOI: 10.1186/1472-6947-13-114     Document Type: Article

References (65)

1. El Emam K, Guide to the de-identification of personal health information Auerbach: CRC Press 2013
2. Canadian Newspaper Association, National Freedom of Information Audit 2007 [Online]. Available: http://www.newspaperscanada.ca/public-affairs/freedom- information
3. A systematic review of re-identification attacks on health data. El Emam K, Jonker E, Arbuckle L, Malin B, PLoS ONE 2011 6 12 28071 10.1371/journal.pone. 0028071 22164229
4. Health Canada, Canada Vigilance Program 2009 [Online]. Available: http://hc-sc.gc.ca/dhp-mps/medeff/vigilance-eng.php
5. Affidavit of Bill Wilson (2006). Mike Gordon vs. The Minister of Health 2008 FC 258
6. Mintzes B, Drug regulatory failures in Canada: The case of Diane-35 Women and Health Protection 2004
7. FDA, Adverse Event Reporting System (AERS) Washington 2009 [Online]. Available: http://www.fda.gov/Drugs/GuidanceComplianceRegulatoryInformation/ Surveillance/AdverseDrugEffects/default.htm
8. Systematic investigation of time windows for adverse event data mining for recently approved drugs. Hochberg AM, Hauben M, Pearson RK, O'Hara D, Reisinger SJ, J Clin Pharmacol 2009 49 626 633 10.1177/0091270009333484 19451402
9. Using data mining to predict safety actions form FDA adverse event reporting system data. Hochberg AM, Reisinger SJ, Ronald DJO, Pearson K, Hall K, Drug Inf J 2007 41 5 633 643 (Pubitemid 47546045)
10. k-anonymity: a model for protecting privacy. Sweeney L, Int J Uncertainty Fuzziness Knowl Based Syst 2002 10 5 557 570 10.1142/S0218488502001648 (Pubitemid 35384857)
11. Protecting respondents' identities in microdata release. Samarati P, IEEE Trans Knowl Data Eng 2001 13 6 1010 1027 10.1109/69.971193 (Pubitemid 34035590)
12. On identification disclosure and prediction disclosure for microdata. Skinner CJ, Statistica Neerlandica 1992 46 1 21 32 10.1111/j.1467-9574.1992. tb01324.x
13. Subcommittee on Disclosure Limitation Methodology-Federal Committee on Statistical Methodology, Working paper 22: report on statistical disclosure control Washington: Office of Management and Budget 1994
14. l-diversity: privacy beyond k-anonymity. Machanavajjhala A, Gehrke J, Kifer D, Trans Knowl Discov Data 2007 1 1 1 47 10.1145/1217299.1217300 (Pubitemid 46712368)
15. Evaluating common de-identification heuristics for personal health information. El Emam K, Jabbouri S, Sams S, Drouet Y, Power M, J Med Internet Res 2006 8 4 28 10.2196/jmir.8.4.e28 17213047 (Pubitemid 47450199)
16. El Emam K, Jonker E, Sams S, Neri E, Neisa A, Gao T, Chowdhury S, Pan-Canadian De-Identification Guidelines for Personal Health Information 2007 [Online]. Available: http://www.ehealthinformation.ca/documents/OPCReportv11.pdf
17. Malin B, Re-identification of familial database records Washington: Proceedings of the American Medical Informatics Association Annual Symposium 2006 524 528
18. Estimating the re-identification risk of clinical data sets. Dankar F, El Emam K, Neisa A, Roffey T, BMC Med Inform Decis Mak 2012 12 66 10.1186/1472-6947-12-66 22776564
19. Manitoba Center for Health Policy, Privacy code Winnipeg 2002
20. Subcommittee on Disclosure Limitation Methodology, Working paper 22: Report on statistical disclosure control Washington: Federal Committee on Statistical Methodology 1994
21. Statistics Canada, Therapeutic abortion survey 2007 [Online]. Available: http://www.statcan.ca/cgi-bin/imdb/p2SV.pl?Function=getSurvey&SDDS= 3209&lang=en&db=IMDB&dbg=f&adm=8&dis=2#b9
22. Flaherty DH, Order No. 261-1998 Victoria: Office of the Information and Privacy Commissioner of British Columbia 1998
23. Fineburg A, Order P-644 Victoria: Office of the Information and Privacy Commissioner of Ontario 1994 [Online]. Available: http://www.ipc.on.ca/images/ Findings/Attached-PDF/P-644.pdf
24. Access to social security microdata files for research and statistical purposes. Alexander L, Jabine T, Soc Secur Bull 1978 41 8 3 17 (Pubitemid 9024515)
25. Ministry of Health and Long Term care (Ontario), Corporate Policy 3-1-21 Toronto: Ontario Ministry of Health and Long Term care 1984
26. Method to assess identifiability in electronic data files. Howe H, Lake A, Shen T, Am J Epidemiol 2007 165 5 597 601 17182982 (Pubitemid 46340557)
27. Howe H, Lake A, Lehnherr M, Roney D, Unique record identification on public use files as tested on the 1994-1998 CINA analytic file Springfield: NAACCR CINA Deluxe Advisory Group Report, North American Association of Central Cancer Registries 2002
28. Heuristics for de-identifying health data. El Emam K, IEEE Secur Privacy 2008 6 4 72 75
29. k-Anonymity. Ciriani V, De Capitani di Vimercati S, Foresti S, Samarati P, Secure Data Management in Decentralized Systems New York: Springer, Yu T, Jajodia S, 2007 462
30. Online Obituaries 2009 [Online]. Available: http://www3.sympatico.ca/ jacquest/online.htm
31. remembering.ca 2009 [Online]. Available: http://classifieds.canada.com/ remembering/index.html
32. Your Life Moments 2009 [Online]. Available: http://www.ospreyobituaries. com/sitepages/?sr=1
33. Protecting privacy using k-anonymity. El Emam K, Dankar F, J Am Med Inform Assoc 2008 15 627 637 10.1197/jamia.M2716 18579830
34. Dolan A, Social engineering Bethesda: SANS Institute 2004
35. National Infrastructure Security Coordination Centre, Social engineering against information systems: what is it and how do you protect yourself? UK: Centre for the Protection of National Infrastructure (CPNI) 2006
36. Winkler I, Dealy B, Information security technology? Don't rely on it: A case study in social engineering Proceedings of the Fifth USENIX UNIX Security Symposium 1995
37. Mitnick K, Simon W, The Art of Deception: Controlling the Human Element of Security Indianapolis: Wiley 2002
38. Long J, No Tech Hacking: A Guide to Social Engineering, Dumpster Diving, and Shoulder Surfing Burlington, MA: Syngress Publishing Inc. 2008
39. Verizon Business Risk Team, 2009 data breach investigations report 2009
40. Symantec, Symantec Global Internet Threat Report-Trends for July-December 07 Symantec Enterprise Security 2008
41. Pendleton J, The growing threat of medical identity theft in Canada Ottawa Electronic Health Information and Privacy Conference, 3 November. 2008 2 35 [ http://www.ehealthinformation.ca/documents/EHIP2008.pdf ]
42. Your secrets for sale. Luck N, Burns J, Daily Express 1994
43. For sale: your secret medical record for 150. Rogers L, Leppard D, Sunday Times 1995 1 2
44. Kravets D, Extortion Plot Threatens to Divulge Millions of Patients' Prescriptions Wired. 2008 [Online] Available: http://www.wired.com/threatlevel/ 2008/11/extortion-plot/.
45. Krebs B, Hackers Break Into Virginia Health Professions Database, Demand Ransom Washington Post. 2009 [Online] Available: http://voices.washingtonpost. com/securityfix/2009/05/hackers-break-into-virginia-he.html.
46. Statistics Canada, Deaths, by month, Canada, provinces and territories 2008 [Online]. Available: http://cansim2.statcan.gc.ca/cgi-win/cnsmcgi.pgm?Lang= E&RegTkt=&C2Sub=&Array-Pick=1&RootDir=CII/&Vec= &ResultTemplate=CII/CII-Pick&ArrayId=1020502&C2DB=PRD
47. Statistics, Deaths, by age and sex, Canada, provinces and territories, annual (number) 2009 [Online]. Available: http://cansim2.statcan.gc.ca/cgi-win/ cnsmcgi.pgm?Lang=E&RegTkt=&C2Sub=&Array-Pick=1&RootDir=CII/ &Vec=&ResultTemplate=CII/CII-Pick&ArrayId=1020503&C2DB=PRD
48. Duncan G, Jabine T, de Wolf S, Private Lives and Public Policies Confidentiality and Accessibility of Government Statistics Washington: National Academies Press 1993
49. A view on statistical disclosure control for microdata. de Waal A, Willenborg L, Survey Methodol 1996 22 1 95 103
50. Office of the Privacy Commissioner of Quebec (CAI), Chenard v. Ministere de l'agriculture, des pecheries et de l'alimentation (141) 1997
51. National Center for Education Statistics, NCES Statistical Standards 2003
52. Cancer Care Ontario, Cancer Care Ontario Data Use and Disclosure Policy Totonto 2005
53. Health Quality Council, Security and confidentiality policies and procedures Saskatoon 2004
54. Health Quality Council, Privacy code Saskatoon 2004
55. Tao Y, Xiao X, Li J, Zhang D, On Anti-Corruption Privacy Preserving Publication Washington, DC, USA: Proceedings of the 2008 IEEE 24th International Conference on Data Engineering 2008 725 734
56. On disclosure risk analysis of anonymized itemsets in the presence of prior knowledge. Lakshmanan LVS, Ng RT, Ramesh G, ACM Trans Knowl Discov Data 2008 2 3 1 13
57. Lakshmanan LVS, Ng RT, Ramesh G, To do or not to do: the dilemma of disclosing anonymized data New York, NY, USA: Proceedings of the 2005 ACM SIGMOD international conference on Management of data 2005 61 72
58. A globally optimal k-anonymity method for the De-identification of health data. El Emam K, Dankar F, Issa R, Jonker E, Amyot D, Cogo E, Corriveau JP, Walker M, Chowdhury S, Vaillancourt R, Roffey T, Bottomley J, J Am Med Inform Assoc 2009 16 5 670 682 10.1197/jamia.M3144 19567795
59. Achieving k-anonymity by clustering in attribute hierarchical structures. Li J, Wong RC, DaWaK, volume 4081 of Lecture Notes in Computer Science Berlin: Springer 2006 405 416 (Pubitemid 44811914)
60. Anonymization by local recoding in data with attribute hierarchical taxonomies. Li J, Wong RCW, Fu AWC, Pei J, IEEE Trans Knowl Data Eng 2008 20 9 1181 1194
61. LeFevre K, DeWitt DJ, Ramakrishnan R, Mondrian Multidimensional K-Anonymity. Proceedings of the 22nd International Conference on Data Engineering, 03-07 April 2006 New York: IEEE 2006 25
62. Juan Y, Jianmin H, Jianmin C, Zanzhu X, TopDown-KACA: An efficient local-recoding algorithm for k-anonymity Nanchang, China: IEEE International Conference on Granular Computing, 2009 2009 727 732
63. Xu J, Wang W, Pei J, Wang X, Shi B, Fu AWC, "Utility-based anonymization using local recoding", in Proceedings of the 12th ACM SIGKDD international conference on Knowledge discovery and data mining New York: NY, USA 2006 785 790
64. FDA, The sentinel initiative: National strategy for monitoring medical product safety Washington: US Food and Drug Administration 2008
65. The New sentinel network-improving the evidence of medical-product safety. Platt R, Wilson M, Chan A, Benner JS, Marchibroda J, McClellan M, NEJM 2009 361 7 645 647 10.1056/NEJMp0905338 19635947