New threats to health data privacy

Area of Science:

• Health Informatics
• Cybersecurity
• Data Privacy

Background:

• Digitalization of health data, including Electronic Health Records (EHRs), raises privacy concerns for secondary use.
• Current privacy research focuses on de-identification and anonymization of published data.
• Adversaries can exploit publicly available online information for sophisticated privacy attacks.

Purpose of the Study:

• To investigate patient privacy vulnerabilities in the digital age.
• To demonstrate how online information aggregation compromises health data privacy.
• To highlight the limitations of traditional privacy-preserving methods against modern threats.

Main Methods:

• Analysis of information aggregation and association across multiple online sources.
• Real-world case study demonstrating attribution, inference, and aggregation attacks.
• Empirical data analysis to assess identifiability with incomplete information.

Main Results:

• Private healthcare information can be exposed by combining data from social networks, public records, and search engines.
• User identity and privacy are highly susceptible to advanced online attacks.
• Individuals remain identifiable even when adversaries possess inaccurate data points.

Conclusions:

• The widespread availability of electronic and online information leaves individuals highly vulnerable.
• Effective privacy protection measures are crucial to mitigate risks associated with data aggregation.
• Existing privacy safeguards may be insufficient against sophisticated, multi-source attacks.