Toward smarter healthcare: Anonymizing medical data to support research studies

IBM Journal of Research and Development

Volumn 58, Issue 1, 2014, Pages

  Gkoulalas Divanis, A ^a   Loukides, G ^b   Sun, J ^c  

^a IBM RESEARCH   (United States)

^b CARDIFF UNIVERSITY   (United Kingdom)

^c IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DIAGNOSIS; HEALTH CARE; HOSPITAL DATA PROCESSING; MEDICAL COMPUTING;

ANONYMIZATION; DATA UTILITIES; DE-IDENTIFICATION; ELECTRONIC MEDICAL RECORD; PATIENT INFORMATION; PATIENT RECORD; PRIVACY PRESERVING; RESEARCH STUDIES;

DATA PRIVACY;

EID: 84930648312     PISSN: 00188646     EISSN: 21518556     Source Type: Journal    
DOI: 10.1147/JRD.2013.2288173     Document Type: Article

References (61)

1. IBM Corporation. (2013). IBM-Smarter planet, Armonk, NY, USA. [Accessed: 15-Mar-2013]. [Online]. Available: http://www. ibm.com/smarterplanet/us/en/?ca=v-smarterplanet
2. Market Research. (2012). Healthcare analytics/medical analytics market - Trends & global forecasts to 2017, Rockville, MD, USA, [Accessed: 14-Mar-2013]. [Online]. Available: http://www. marketresearch.com/MarketsandMarkets-v3719/Healthcare-Analytics-Medical-Trends-Global-7256888/
3. L. Ohno-Machado, "To share or not to share: that is not the question," Sci. Trans. Med., vol. 4, no. 165, p. 165cm15, Dec. 2012.
4. D. A. Ludwick and J. Doucette, "Adopting electronic medical records in primary care: Lessons learned from health information systems implementation experience in seven countries," Int. J. Med. Inf., vol. 78, no. 1, pp. 22-31, Jan. 2009.
5. National Partnership for Women & Families. (2012). Making IT meaningful: How consumers value and trust health IT survey, Washington, DC, USA, [Accessed: 14-Mar-2013]. [Online]. Available: http://www.nationalpartnership.org/site/DocServer/HIT-Making-IT-Meaningful-National-Partnership-February-2.pdf
6. National Institutes of Health. (2007). Policy for sharing data obitained in NIH supported or conducted genome-wide association studies, Bethesda, MD, USA, NOT-OD-07-088, [Accessed: 14-Mar-2013]. [Online]. Available: http://grants.nih. gov/grants/guide/notice-files/NOT-OD-07-088.html
7. Medical Research Council. (2011). MRC policy and guidance on sharing of research data from population and patient studies, London, U.K., [Accessed: 14-Mar-2013]. [Online]. Available: http://www.mrc.ac.uk/Ourresearch/Ethicsresearchguidance/datasharing/Policy/index.htm
8. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu, "Hippocratic databases," in Proc. 28th Int. Conf. Very Large Data Bases, Hong Kong, 2002, pp. 143-154.
9. IBM ResearchVZurich, Idemix, IBM Corporation, REPLACE [Accessed: 12-Mar-2013]. [Online]. Available: http://www.zurich. ibm.com/idemix/
10. City Fabric, IBM Corporation, IBM Research, Dublin, Ireland, Dec. 13, 2012, [Accessed: 07-Mar-2013]. [Online]. Available: http://researcher.watson.ibm.com/researcher/view-project.php? id=3799
11. The eMERGE Network, [Accessed: 07-Mar-2013]. [Online]. Available: http://emerge.mc.vanderbilt.edu/
12. iDASHj Integrating Data for Analysis, Anonymization, and SHaring, [Accessed: 07-Mar-2013]. [Online]. Available: http://idash.ucsd.edu/
13. IBMVInfoSphere Optim, IBM Corporation, Mar. 11, 2013, [Accessed: 12-Mar-2013]. [Online]. Available: http://www-01. ibm.com/software/data/optim/
14. IBMVInfoSphere Guardium Data Redaction, IBM Corporation, Mar. 12, 2013, [Accessed: 12-Mar-2013]. [Online]. Available: http://www-142.ibm.com/software/products/gb/en/infoguardatareda/
15. S. M. Meystre, F. J. Friedlin, B. R. South, S. Shen, and M. H. Samore, "Automatic de-identification of textual documents in the electronic health record: A review of recent research," BMC Med. Res. Methodol., vol. 10, no. 1, p. 70, Aug. 2010.
16. A. Meyerson and R. Williams, "On the complexity of optimal K-anonymity," in Proc. 23rd ACM SIGMOD-SIGACT-SIGART Symp. Principles Database Syst., New York, NY, USA, 2004, pp. 223-228.
17. G. Loukides, A. Gkoulalas-Divanis, and B. Malin, "Anonymization of electronic medical records for validating genome-wide association studies," Proc. Nat. Acad. Sci. USA, vol. 107, no. 17, pp. 7898-7903, Apr. 2010.
18. G. Loukides, A. Gkoulalas-Divanis, and J. Shao, "Efficient and flexible anonymization of transaction data," Knowl. Inf. Syst., vol. 36, no. 1, pp. 153-210, Jul. 2013.
19. G. Loukides, A. Gkoulalas-Divanis, and J. Shao, "Assessing disclosure risk and data utility trade-off in transaction data anonymization," Int. J. Softw. Inf., vol. 6, no. 3, pp. 399-417, 2012.
20. Report to Congress on Breach Notification Program, [Accessed: 05-Mar-2013]. [Online]. Available: http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/breachreptmain.html
21. K. El Emam, E. Jonker, L. Arbuckle, and B. Malin, "A systematic review of re-identification attacks on health data," PLoS ONE, vol. 6, no. 12, p. e28071, 2011.
22. HIPAA Administrative Simplification Statute and Rules, U.S. Department of Health and Human Services Office for Civil Rights [Accessed: 05-Mar-2013]. [Online]. Available: http://www.hhs.gov/ocr/privacy/hipaa/administrative/index.html
23. EU Data Protection Directive 95/46/EC, European Commission, 1995, [Accessed: 13-Mar-2013]. [Online]. Available: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX: 31995L0046:en:HTML
24. L. S. Branch, Consolidated federal laws of canada, Personal Information Protection and Electronic Documents Act, Apr. 1, 2011, [Accessed: 05-Mar-2013]. [Online]. Available: http://laws-lois.justice.gc.ca/eng/acts/P-8.6/FullText.html
25. K. El Emam, "Methods for the de-identification of electronic health records for genomic research," Genome Med., vol. 3, no. 4, p. 25, Apr. 2011.
26. G. Loukides, J. C. Denny, and B. Malin, "The disclosure of diagnosis codes can breach research participants' privacy," J. Amer. Med. Inf. Assoc., vol. 17, no. 3, pp. 322-327, May/Jun. 2010.
27. M. Terrovitis, N. Mamoulis, and P. Kalnis, "Privacy-preserving anonymization of set-valued data," Proc. VLDB Endow., vol. 1, no. 1, pp. 115-125, Aug. 2008.
28. A. Tamersoy, G. Loukides, M. E. Nergiz, Y. Saygin, and B. Malin, "Anonymization of longitudinal electronic medical records," IEEE Trans. Inf. Technol. Biomed., vol. 16, no. 3, pp. 413-423, May 2012.
29. N. Homer, S. Szelinger, M. Redman, D. Duggan, W. Tembe, J. Muehling, J. V. Pearson, D. A. Stephan, S. F. Nelson, and D. W. Craig, "Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays," PLoS Genet., vol. 4, no. 8, p. e1000167, Aug. 2008.
30. B. Malin, G. Loukides, K. Benitez, and E. W. Clayton, "Identifiability in biobanks: Models, measures, and mitigation strategies," Hum. Genet., vol. 130, no. 3, pp. 383-392, Sep. 2011.
31. J. Gardner, L. Xiong, K. Li, and J. J. Lu, "HIDE: Heterogeneous information DE-identification," in Proc. 12th Int. Conf. Extend. Database Technol., Adv. Database Technol., New York, NY, USA, 2009, pp. 1116-1119.
32. G. Szarvas, R. Farkas, and R. Busa-Fekete, "State-of-the-art anonymization of medical records using an iterative machine learning framework," J. Amer. Med. Inf. Assoc., vol. 14, no. 5, pp. 574-580, Sep./Oct. 2007.
33. S. L. Clause, D. M. Triller, C. P. H. Bornhorst, R. A. Hamilton, and L. E. Cosler, "Conforming to HIPAA regulations and compilation of research data," Amer. J. Health Syst. Pharm., vol. 61, no. 10, pp. 1025-1031, May 2004.
34. L. Sweeney, "k-anonymity: A model for protecting privacy," Int. J. Uncertain. Fuzziness Knowl.-Based Syst., vol. 10, no. 5, pp. 557-570, Oct. 2002.
35. K. E. Emam and F. K. Dankar, "Protecting privacy using k-anonymity," J. Amer. Med. Inf. Assoc., vol. 15, no. 5, pp. 627-637, Sep./Oct. 2008.
36. L. Sweeney, "Guaranteeing anonymity when sharing medical data, the datafly system," in Proc. Amer. Med. Inf. Assoc. Annu. Fall Symp., 1997, pp. 51-55.
37. L. Willenborg and T. de Waal, Statistical Disclosure Control in Practice. New York, NY, USA: Springer-Verlag, 1996.
38. A. Machanavajjhala, J. Gehrke, D. Kifer, and M. Venkitasubramaniam, "L-diversity: Privacy beyond k-anonymity," in Proc. 22nd Int. Conf. Data Eng., 2006, p. 24.
39. B. C. M. Fung, K. Wang, R. Chen, and P. S. Yu, "Privacy-preserving data publishing: A survey of recent developments," ACM Comput. Surveys, vol. 42, no. 4, pp. 14:1-14:53, Jun. 2010.
40. G. Loukides and J. Shao, "Preventing range disclosure in k-anonymised data," Exp. Syst. Appl., vol. 38, no. 4, pp. 4559-4574, Apr. 2011.
41. N. Li, T. Li, and S. Venkatasubramanian, "t-Closeness: Privacy beyond k-anonymity and l-diversity," in Proc. IEEE 23rd Int. Conf. Data Eng., 2007, pp. 106-115.
42. Y. He and J. F. Naughton, "Anonymization of set-valued data via top-down, local generalization," Proc. VLDB Endow., vol. 2, no. 1, pp. 934-945, Aug. 2009.
43. J. Cao, P. Karras, C. Raissi, and K.-L. Tan, "Uncertainty: Inference-proof transaction anonymization," Proc. VLDB Endow., vol. 3, no. 1/2, pp. 1033-1044, Sep. 2010.
44. Y. Xu, K. Wang, A. W.-C. Fu, and P. S. Yu, "Anonymizing transaction databases for publication," in Proc. 14th ACM SIGKDD Int. Conf. Knowl. Discov. Data Mining, New York, NY, USA, 2008, pp. 767-775.
45. L. Willenborg and T. de Waal, Elements of Statistical Disclosure Control. New York, NY, USA: Springer-Verlag, 1996.
46. C. Dwork, "Differential privacy," in Proc. 33rd Int. Conf. Autom., Lang. Programm.VVolume Part II, Berlin, Gemany, 2006, pp. 1-12.
47. N. Mohammed, B. C. M. Fung, P. C. K. Hung, and C. Lee, "Anonymizing healthcare data: A case study on the blood transfusion service," in Proc. 15th ACM SIGKDD Int. Conf. Knowl. Discov. Data Mining, New York, NY, USA, 2009, pp. 1285-1294.
48. R. Sarathy and K. Muralidhar, "Evaluating laplace noise addition to satisfy differential privacy for numeric data," Trans. Data Privacy, vol. 4, no. 1, pp. 1-17, Apr. 2011.
49. F. K. Dankar and K. El Emam, "The application of differential privacy to health data," in Proc. Joint EDBT/ICDT Workshops, New York, NY, USA, 2012, pp. 158-166.
50. P. Samarati, "Protecting respondents identities in microdata release," IEEE Trans. Knowl. Data Eng., vol. 13, no. 6, pp. 1010-1027, Nov./Dec. 2001.
51. K. LeFevre, D. J. DeWitt, and R. Ramakrishnan, "Mondrian multidimensional K-anonymity," in Proc. 22nd Int. Conf. Data Eng., Washington, DC, USA, 2006, p. 25.
52. G. Loukides, A. Gkoulalas-Divanis, and B. Malin, "COAT: COnstraint-based anonymization of transactions," Knowl. Inf. Syst., vol. 28, no. 2, pp. 251-282, Aug. 2011.
53. A. Gkoulalas-Divanis and G. Loukides, "Utility-guided clustering-based transaction data anonymization," Trans. Data Privacy, vol. 5, no. 1, pp. 223-251, Apr. 2012.
54. A. Gionis, A. Mazza, and T. Tassa, "k-anonymization revisited," in Proc. IEEE 24th Int. Conf. Data Engineering, Washington, DC, USA, 2008, pp. 744-753.
55. R. Agrawal and R. Srikant, "Fast algorithms for mining association rules in large databases," in Proc. 20th Int. Conf. Very Large Data Bases, San Francisco, CA, USA, 1994, pp. 487-499.
56. R. C.-W. Wong, A. W.-C. Fu, K. Wang, and J. Pei, "Anonymization-based attacks in privacy-preserving data publishing," ACM Trans. Database Syst., vol. 34, no. 2, pp. 8:1-8:46, Jul. 2009.
57. X. Xiao, Y. Tao, and N. Koudas, "Transparent anonymization: Thwarting adversaries who know the algorithm," ACM Trans. Database Syst., vol. 35, no. 2, pp. 8:1-8:48, Apr. 2010.
58. A. Gkoulalas-Divanis and G. Loukides, "Revisiting sequential pattern hiding to enhance utility," in Proc. 17th ACM SIGKDD Int. Conf. Knowl. Discov. Data Mining, New York, NY, USA, 2011, pp. 1316-1324.
59. W. Du, Z. Teng, and Z. Zhu, "Privacy-MaxEnt: Integrating background knowledge in privacy quantification," in Proc. ACM SIGMOD Int. Conf. Manage. Data, New York, NY, USA, 2008, pp. 459-472.
60. T. Li, N. Li, and J. Zhang, "Modeling and integrating background knowledge in data anonymization," in Proc. IEEE 25th ICDE, 2009, pp. 6-17.
61. K. J. Cios and G. W. Moore, "Uniqueness of medical data mining," Artif. Intell. Med., vol. 26, no. 1/2, pp. 1-24, Sep./Oct. 2002.