Data safe havens and trust: Toward a common understanding of trusted research platforms for governing secure and ethical health research

JMIR Medical Informatics

Volumn 4, Issue 2, 2016, Pages

  Lea, Nathan Christopher ^a   Nicholls, Jacqueline ^a   Dobbs, Christine ^b   Sethi, Nayha ^c   Cunningham, James ^d   Ainsworth, John ^d   Heaven, Martin ^b   Peacock, Trevor ^a   Peacock, Anthony ^a   Jones, Kerina ^b   Laurie, Graeme ^c   Kalra, Dipak ^e  

^a UNIVERSITY COLLEGE LONDON   (United Kingdom)

^b SWANSEA UNIVERSITY   (United Kingdom)

^c UNIVERSITY OF EDINBURGH   (United Kingdom)

^d UNIVERSITY OF MANCHESTER   (United Kingdom)

^e EuroRec: The European Institute for Health Records   (Belgium)

Author keywords

Clinical research support; Data safe havens; Genomics research support; Health record linkage supported research; Legislative and regulatory compliance; Public engagement; Public involvement; Trusted research platforms; Trusted researchers

Indexed keywords

EID: 85029191288     PISSN: None     EISSN: 22919694     Source Type: Journal    
DOI: 10.2196/medinform.5571     Document Type: Review

References (60)

1. Geissbuhler A, Safran C, Buchan I, Bellazzi R, Labkoff S, Eilenberg K, et al. Trustworthy reuse of health data: A transnational perspective. Int J Med Inform 2013 Jan; 82(1):1-9. [doi: 10.1016/j.ijmedinf.2012.11.003] [Medline: 23182430]
2. Baillie J. How 'big data' will drive future innovation. Health Estate 2016 Mar; 70(3):59-64. [Medline: 27132307]
3. Chatellier G, Varlet V, Blachier-Poisson C. "Big data" and "open data": What kind of access should researchers enjoy? Therapie 2016 Feb; 71(1):97-105, 107. [doi: 10.1016/j.therap.2016.01.005] [Medline: 27080635]
4. Burton PR, Murtagh MJ, Boyd A, Williams JB, Dove ES, Wallace SE, et al. Data safe havens in health research and healthcare. Bioinformatics 2015 Oct 15; 31(20):3241-3248. [doi: 10.1093/bioinformatics/btv279] [Medline: 26112289]
5. Knoppers BM, Chadwick R. The ethics weathervane. BMC Med Ethics 2015; 16:58 [FREE Full text] [doi: 10.1186/s12910-015-0054-4] [Medline: 26337535]
6. Denaxas SC, Morley KI. Big biomedical data and cardiovascular disease research: Opportunities and challenges. Eur Heart J Qual Care Clin Outcomes 2015 Jun 11; 1(1):9-16. [doi: 10.1093/ehjqcco/qcv005]
7. Gottesman O, Kuivaniemi H, Tromp G, Faucett WA, Li R, Manolio TA, eMERGE Network. The Electronic Medical Records and Genomics (eMERGE) Network: Past, present, and future. Genet Med 2013 Oct; 15(10):761-771 [FREE Full text] [doi: 10.1038/gim.2013.72] [Medline: 23743551]
8. Atherton IM, Lynch E, Williams AJ, Witham MD. Barriers and solutions to linking and using health and social care data in Scotland. Br J Soc Work 2015 Jun 02; 45(5):1614-1622. [doi: 10.1093/bjsw/bcv047]
9. Cooksey D. A review of Health Service Funding. 2006. URL:https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/228984/0118404881.pdf [accessed 2016-01-22] [WebCite Cache ID 6ej6Ttr2L]
10. University of Essex. The Administrative Data Research Network. 2015 URL:http://adrn.ac.uk [accessed 2016-01-04] [WebCite Cache ID 6eHzl6fnc]
11. Wellcome Trust, Ipsos Mori. Medical Research and the Public: Understanding, Involvement and Opinions. 2013. URL:http://www.wellcome.ac.uk/stellent/groups/corporatesite/@msh_grants/documents/web_document/wtp052592.pdf [accessed 2016-01-04] [WebCite Cache ID 6eHyeXeiE]
12. Taylor MJ, Taylor N. Health research access to personal confidential data in England and Wales: Assessing any gap in public attitude between preferable and acceptable models of consent. Life Sci Soc Policy 2014 Dec; 10:15 [FREE Full text] [doi: 10.1186/s40504-014-0015-6] [Medline: 26085451]
13. Royal Statistical Society. Royal Statistical Society Research on Trust in Data and Attitudes Toward Data Use/Data Sharing. 2014 Jul 22. URL:http://www.rss.org.uk/Images/PDF/influencing-change/rss-data-trust-deficit-Ipsos-Mori-RSS-charts-slides-2014.pdf [accessed 2016-06-13] [WebCite Cache ID 6iEmnXOSV]
14. [No authors listed]. Careless.data. Nature 2014 Mar 6; 507(7490):7. [Medline: 24605371]
15. Open Rights Group. Swinney Fails to Address Privacy Concerns Over Scottish NHS Database Proposals. 2015. URL:https://www.openrightsgroup.org/press/releases/swinney-fails-to-address-privacy-concerns-over-scottish-nhs-database-proposals [accessed 2016-01-04] [WebCite Cache ID 6eHzA50y6]
16. Kaplan B. Selling health data. Camb Q Healthc Ethics 2015 Jun 10; 24(03):256-271. [doi: 10.1017/s0963180114000589]
17. Carter P, Laurie GT, Dixon-Woods M. The social licence for research: why care.data ran into trouble. J Med Ethics 2015 May; 41(5):404-409 [FREE Full text] [doi: 10.1136/medethics-2014-102374] [Medline: 25617016]
18. Junghans C, Feder G, Hemingway H, Timmis A, Jones M. Recruiting patients to medical research: Double blind randomised trial of "opt-in" versus "opt-out" strategies. BMJ 2005 Oct 22; 331(7522):940 [FREE Full text] [doi: 10.1136/bmj.38583.625613.AE] [Medline: 16157604]
19. van Staa TP, Dyson L, McCann G, Padmanabhan S, Belatri R, Goldacre B, et al. The opportunities and challenges of pragmatic point-of-care randomised trials using routinely collected electronic records: Evaluations of two exemplar trials. Health Technol Assess 2014 Jul; 18(43):1-146 [FREE Full text] [doi: 10.3310/hta18430] [Medline: 25011568]
20. Al-Shahi R, Vousden C, Warlow C, Scottish Intracranial Vascular Malformation Study (SIVMS) Steering Committee. Bias from requiring explicit consent from all participants in observational research: Prospective, population based study. BMJ 2005 Oct 22; 331(7522):942 [FREE Full text] [doi: 10.1136/bmj.38624.397569.68] [Medline: 16223793]
21. Hunt KJ, Shlomo N, Addington-Hall J. Participant recruitment in sensitive surveys: A comparative trial of 'opt in' versus 'opt out' approaches. BMC Med Res Methodol 2013; 13:3 [FREE Full text] [doi: 10.1186/1471-2288-13-3] [Medline: 23311340]
22. Berry JG, Ryan P, Duszynski KM, Braunack-Mayer AJ, Carlson J, Xafis V, Vaccine Assessment using Linked Data (VALiD) Working Group. Parent perspectives on consent for the linkage of data to evaluate vaccine safety: A randomised trial of opt-in and opt-out consent. Clin Trials 2013; 10(3):483-494. [doi: 10.1177/1740774513480568] [Medline: 23568940]
23. Elkington J, Stevenson M, Haworth N, Sharwood L. Using police crash databases for injury prevention research - a comparison of opt-out and opt-in approaches to study recruitment. Aust N Z J Public Health 2014 Jun; 38(3):286-289. [doi: 10.1111/1753-6405.12237] [Medline: 24890488]
24. O'Neill O. Some limits of informed consent. J Med Ethics 2003 Feb; 29(1):4-7 [FREE Full text] [Medline: 12569185]
25. King T, Brankovic L, Gillard P. Perspectives of Australian adults about protecting the privacy of their health information in statistical databases. Int J Med Inform 2012 Apr; 81(4):279-289. [doi: 10.1016/j.ijmedinf.2012.01.005] [Medline: 22306206]
26. Wiesenauer M, Johner C, Röhrig R. Secondary use of clinical data in healthcare providers - an overview on research, regulatory and ethical requirements. Stud Health Technol Inform 2012; 180:614-618. [Medline: 22874264]
27. Couzin-Frankel J. Trust me, I'm a medical researcher. Science 2015 Jan 30; 347(6221):501-503. [doi: 10.1126/science.347.6221.501] [Medline: 25635087]
28. Sweeney L. k-Anonymity: A model for protecting privacy. Int J Uncertainty Fuzziness Knowlege-Based Syst 2002 Oct; 10(05):557-570. [doi: 10.1142/S0218488502001648]
29. Exeter DJ, Rodgers S, Sabel CE. "Whose data is it anyway?" The implications of putting small area-level health and social data online. Health Policy 2014 Jan; 114(1):88-96. [doi: 10.1016/j.healthpol.2013.07.012] [Medline: 23932285]
30. Heatherly R, Rasmussen LV, Peissig PL, Pacheco JA, Harris P, Denny JC, et al. A multi-institution evaluation of clinical profile anonymization. J Am Med Inform Assoc 2016 Apr; 23(e1):e131-e137. [doi: 10.1093/jamia/ocv154] [Medline: 26567325]
31. Personal Data for Public Good: Using Health Information in Medical Research. London, UK: Academy of Medical Sciences; 2006.
32. O'Keefe CM, Rubin DB. Individual privacy versus public good: Protecting confidentiality in health research. Stat Med 2015 Oct 15; 34(23):3081-3103. [doi: 10.1002/sim.6543] [Medline: 26045214]
33. Filippon J. Slow and costly access to anonymised patient data impedes academic research. BMJ 2015; 351:h5087. [Medline: 26408001]
34. Ainsworth J, Buchan I. Combining health data uses to ignite health system learning. Methods Inf Med 2015 Sep 17; 54(6):479-487. [doi: 10.3414/ME15-01-0064]
35. Thomas R, Walport M. The Data Sharing Review. London, UK: United Kingdom Ministry of Justice; 2008. URL:http://webarchive.nationalarchives.gov.uk/+/http:/www.justice.gov.uk/docs/data-sharing-review.pdf [accessed 2016-06-13] [WebCite Cache ID 6iEnQVCvt]
36. Department of Health. Information: To Share or Not to Share? The Information Governance Review. Leeds, UK: Department of Health; 2013. URL:https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/192572/2900774_InfoGovernance_accv2.pdf [accessed 2016-01-22] [WebCite Cache ID 6ehbNXyeZ]
37. Academy of Medical Sciences. Data in Safe Havens. 2014. URL:http://www.acmedsci.ac.uk/policy/policy-projects/data-in-safe-havens/[accessed 2016-06-13] [WebCite Cache ID 6iEngksVf]
38. Her Majesty's Stationery Office. Children Act, 1989, c. 41. Kew, Surrey: The National Archives; 1989. URL:http://www. legislation.gov.uk/ukpga/1989/41/contents [accessed 2016-06-15] [WebCite Cache ID 6iHqK0sKK]
39. Her Majesty's Stationery Office. Mental Capacity Act, 2005, c. 9. Kew, Surrey: The National Archives; 2005. URL:http://www.legislation.gov.uk/ukpga/2005/9/contents [accessed 2016-06-15] [WebCite Cache ID 6iHqOoqba]
40. Her Majesty's Stationery Office. Human Tissue Act, 2004, c. 30. Kew, Surrey: The National Archives; 2004. URL:http://www.legislation.gov.uk/ukpga/2004/30/contents [accessed 2016-06-15] [WebCite Cache ID 6iHqUHb78]
41. Her Majesty's Stationery Office. Human Rights Act, 1998, c. 42. Kew, Surrey: The National Archives; 1998. URL:http://www.legislation.gov.uk/ukpga/1998/42/contents [accessed 2016-06-15] [WebCite Cache ID 6iHqYPKeu]
42. Her Majesty's Stationery Office. Data Protection Act, 1998, c.29. Kew, Surrey: The National Archives; 1998. URL:http://www.legislation.gov.uk/ukpga/1998/29/contents [accessed 2016-06-15] [WebCite Cache ID 6iHqecufC]
43. Information Commissioner's Office. Information Commissioner's Office. 2014. URL:https://ico.org.uk [accessed 2016-01-04] [WebCite Cache ID 6eI100FpU]
44. Her Majesty's Sationary Office. Health and Social Care Act, 2012, c. 7. Kew, Surrey: The National Archives; 2012. URL:http://www.legislation.gov.uk/ukpga/2012/7/contents [accessed 2016-06-15] [WebCite Cache ID 6iHqrvipb]
45. Her Majesty's Sationary Office. Care Act, 2014, c. 23. Kew, Surrey: The National Archives; 2014. URL:http://www. legislation.gov.uk/ukpga/2014/23/contents [accessed 2016-06-15] [WebCite Cache ID 6iHr1XQPm]
46. Her Majesty's Stationary Office. National Health Service Act, 2006, c. 41. Kew, Surrey: The National Archives; 2006. URL:http://www.legislation.gov.uk/ukpga/2006/41/contents [accessed 2016-06-15] [WebCite Cache ID 6iHrA2323]
47. The International Organization for Standardization. ISO/IEC 27000: Information Technology-Security-Information Security Mangement Systems: Overview and Vocabulary. 2014. URL:http://www.iso.org/iso/home/store/catalogue_tc/catalogue_detail.htm?csnumber=63411 [accessed 2016-01-04] [WebCite Cache ID 6eI0bXelQ]
48. British Standards Institute. ISO/IEC 27001: 2013 Information Technology-Security Techniques-Information Security Management Systems-Requirements. London, UK: British Standards Institute; 2013. URL:http://www.iso.org/iso/catalogue_detail?csnumber=54534 [accessed 2016-06-13] [WebCite Cache ID 6iEo4nRB6]
49. British Standards Institute. ISO/IEC 27002: 2013 Information Technology-Security Techniques-Code of Practice for Information Security Controls. London, UK: British Standards INstitute; 2013. URL:http://www.iso.org/iso/catalogue_detail?csnumber=54533 [accessed 2016-06-13] [WebCite Cache ID 6iEoELZ71]
50. Department of Health. About the Information Governance Toolkit. 2014. URL:https://www.igt.hscic.gov.uk/about.aspx [accessed 2016-01-04] [WebCite Cache ID 6eHzTHs80]
51. Council of Canadian Academies. Accessing Health and Health-Related Data in Canada. 2015. URL:http://www. scienceadvice.ca/uploads/eng/assessments%20and%20publications%20and%20news%20releases/Health-data/HealthDataFullReportEn.pdf [accessed 2016-01-19] [WebCite Cache ID 6eemC7okF]
52. Ainsworth J, Cunningham J, Buchan I. eLab: Bringing together people, data and methods to enhance knowledge discovery in healthcare settings. Stud Health Technol Inform 2012; 175:39-48. [Medline: 22941986]
53. Bechhofer S, De Roure D, Gamble M, Goble C, Buchan I. Research objects: Towards exchange and reuse of digital knowledge. Nature Precedings 2010 Jul 6. [doi: 10.1038/npre.2010.4626.1]
54. Jones KH, Ford DV, Jones C, Dsilva R, Thompson S, Brooks CJ, et al. A case study of the Secure Anonymous Information Linkage (SAIL) Gateway: A privacy-protecting remote access system for health-related research and evaluation. J Biomed Inform 2014 Aug; 50:196-204 [FREE Full text] [doi: 10.1016/j.jbi.2014.01.003] [Medline: 24440148]
55. Sethi N, Laurie GT. Delivering proportionate governance in the era of eHealth: Making linkage and privacy work together. Med Law Int 2013 Jun; 13(2-3):168-204 [FREE Full text] [doi: 10.1177/0968533213508974] [Medline: 24634569]
56. University of Edinburgh. Safe Haven and the Farr Institute. 2015. URL:http://www.ed.ac.uk/molecular-clinical-medicine/health-services-research-unit/projects/safe-haven [accessed 2016-01-04] [WebCite Cache ID 6eHzZrbHe]
57. A Health and Biomedical Informatics Research Strategy for Scotland.: The Scottish Government; 2015. URL:http://www. gov.scot/Publications/2015/04/6687/5 [accessed 2016-01-22] [WebCite Cache ID 6eI04vt1c]
58. Scottish Government, Health Informatics Research Advisory Group. A Health and Biomedical Informatics Research Strategy for Scotland: Enhancing Research Capability in Health Informatics for Patient and Public Benefit 2015-2020. Edinburgh: The Scottish Government; 2015 Apr. URL:http://www.gov.scot/Resource/0047/00475145.pdf [accessed 2016-06-13] [WebCite Cache ID 6iEoT3muL]
59. The Scottish Government. A Charter for Safe Havens in Scotland: Handling Unconsented Data From National Health Service Patient Records to Support Research and Statistics. Edinburgh, Scotland: The Scottish Government; 2015 Nov. URL:http://www.gov.scot/Resource/0048/00489000.pdf [accessed 2016-06-15] [WebCite Cache ID 6iHngJWJy]
60. Custodix N.V.. Custodix. 2016. URL:https://www.custodix.com [accessed 2016-01-21] [WebCite Cache ID 6ehbDXiLF]