Related Experiment Videos
Three computational systems for disclosing medical data in the year 1999
1Laboratory for Computer Science, Massachusetts Institute of Technology, USA. sweeney@medg.lcs.mit.edu
Studies in Health Technology and Informatics
|June 29, 1999
Summary
Many organizations incorrectly believe removing explicit identifiers anonymizes medical data. This study reviews three systems—Scrub, Datafly, and mu-Argus—that effectively protect patient confidentiality in electronic health records.
Area of Science:
- Medical Informatics
- Computer Science
- Public Health
Background:
- Organizations often release electronic medical records after removing explicit identifiers, mistakenly assuming patient confidentiality is maintained.
- The increasing accessibility of personal data in a globally-networked society necessitates robust methods for protecting sensitive health information.
Purpose of the Study:
- To evaluate computer systems designed to maintain patient confidentiality during the disclosure of electronic medical records.
- To highlight effective techniques for safeguarding sensitive health data in the digital age.
Main Methods:
- Examination of three distinct computer programs: the Scrub System, the Datafly System, and the mu-Argus System.
- Analysis of the techniques employed by each system to identify and mitigate privacy risks in medical data disclosure.
Main Results:
- The Scrub System identifies and removes personally-identifying information from clinical correspondence.
- The Datafly System generalizes data based on recipient access profiles to enhance privacy.
- The mu-Argus System is emerging as a European standard for public use data disclosure, offering robust confidentiality measures.
Conclusions:
- Simple removal of explicit identifiers is insufficient for ensuring patient confidentiality in electronic medical records.
- The evaluated systems (Scrub, Datafly, mu-Argus) offer effective strategies for protecting patient privacy when sharing medical data.
- Advanced techniques are crucial for maintaining confidentiality in an era of widespread data accessibility and global networking.