Newswise — May 16, 2016 – Many healthcare journals encourage researchers to post their original data online, in the interest of research openness. But open sharing of research databases can place private patient information at risk, according to a special topic paper in Anesthesia & Analgesia.
Even with "anonymized" data, there's a substantial risk that an attacker could identify an individual patient's health records from publicly posted databases—a threat that cannot always be prevented by current protective measures. The review was co-authored by healthcare management expert Liam O'Neill, PhD, of University of North Texas-Health Science Center; anesthesiologist Franklin Dexter, MD, PhD, of University of Iowa: and computer scientist Nan Zhang, PhD, of George Washington University.
Patient Data Potentially at Risk in 'De-Identified' DatabasesOpen sharing of healthcare databases is viewed as a means of ensuring research integrity, enabling other researchers to independently validate the findings. Before posting online, the research data are "de-identified" to remove identifiable information.
But in recent years, it has become clear even anonymized data can put patient privacy at risk. The authors are especially concerned about the risks of posting data from small studies or series of patients from a few hospitals—a type of data commonly used for research in anesthesiology and surgery.
Knowing even a few pieces of information may enable an "adversary" to identify individual patients. In one example, researchers showed that by matching voter registration data to a de-identified healthcare database, it was possible to "re-identify" the health records of a public figure.
"For anesthesia studies, the variables most likely to result in identification of individuals are the combination of hospital and surgical procedures," Dr. O'Neill and coauthors write. Especially for less commonly performed procedures, matching the data to a specific individual would be relatively easy.
The article discusses the methods of attack used by adversaries and the current defense methods—each of which has its limitations. Simply complying with the HIPAA's "Safe Harbor" privacy rules does not protect against all attacks. "While the methods available to those who would undermine privacy have undergone rapid development, the methods of 'defense' have not achieved similar breakthroughs," according to the authors. In a case study, they evaluated the "population uniqueness" of patients in a Texas surgical database, which included more than 2.8 million records. While the uniqueness of records was low for most patients, Dr. O'Neill and colleagues write, "An adversary would have about a 42.8 percent chance of linking the anesthesia record to the hospital database, and thereby discovering the patient's sensitive information." While this risk is unacceptably high, it would be even higher using data from less-populous states.
The safeguards adopted in fields such as economics and business may not be sufficient for healthcare journals, the authors suggest. Drs. O'Neill, Dexter, and Zhang propose policies that journals in anesthesia and other medical specialties could adopt to help reduce threats to patient privacy. For example, data could be maintained in a specified format, to be supplied to qualified researchers on request to the journal editor.
Dr. Steven L. Shafer of Stanford University, Editor-in-Chief of Anesthesia & Analgesia, believes the new paper will have profound implications for digital sharing of patient data, "For my entire term as Editor, I have pushed authors to share data, under the assumption that anonymized data could be safely shared," he comments. "Our authors show that this is not the case. "For the editors of major medical journals, this article will quickly ice their plans to promote scientific exchange of data," Dr. Shafer adds. "I don't like what this paper demonstrates, but it is better to know an uncomfortable truth than to remain ignorant."
Anesthesia & Analgesia is published by Wolters Kluwer.
Read the article in Anesthesia & Analgesia.
###
About Anesthesia & AnalgesiaAnesthesia & Analgesia was founded in 1922 and was issued bi-monthly until 1980, when it became a monthly publication. A&A is the leading journal for anesthesia clinicians and researchers and includes more than 500 articles annually in all areas related to anesthesia and analgesia, such as cardiovascular anesthesiology, patient safety, anesthetic pharmacology, and pain management. The journal is published on behalf of the IARS by Lippincott Williams & Wilkins (LWW), a division of Wolters Kluwer Health.
About the IARSThe International Anesthesia Research Society is a nonpolitical, not-for-profit medical society founded in 1922 to advance and support scientific research and education related to anesthesia, and to improve patient care through basic research. The IARS contributes nearly $1 million annually to fund anesthesia research; provides a forum for anesthesiology leaders to share information and ideas; maintains a worldwide membership of more than 15,000 physicians, physician residents, and others with doctoral degrees, as well as health professionals in anesthesia related practice; sponsors the SmartTots initiative in partnership with the FDA; supports the resident education initiative OpenAnesthesia; and publishes two journals, Anesthesia & Analgesia and A&A Case Reports.
About Wolters KluwerWolters Kluwer is a global leader in professional information services. Professionals in the areas of legal, business, tax, accounting, finance, audit, risk, compliance and healthcare rely on Wolters Kluwer's market leading information-enabled tools and software solutions to manage their business efficiently, deliver results to their clients, and succeed in an ever more dynamic world.
Wolters Kluwer reported 2015 annual revenues of €4.2 billion. The group serves customers in over 180 countries, and employs over 19,000 people worldwide. The company is headquartered in Alphen aan den Rijn, the Netherlands. Wolters Kluwer shares are listed on Euronext Amsterdam (WKL) and are included in the AEX and Euronext 100 indices. Wolters Kluwer has a sponsored Level 1 American Depositary Receipt program. The ADRs are traded on the over-the-counter market in the U.S. (WTKWY).
For more information about our products and organization, visit www.wolterskluwerhealth.com, follow @WKHealth or @Wolters_Kluwer on Twitter, like us on Facebook, follow us on LinkedIn, or follow WoltersKluwerComms on YouTube.