Medical Data Privacy Handbook

1. Front Matter

   Pages i-xliii

   PDF

2. Introduction to Medical Data Privacy

   • Aris Gkoulalas-Divanis, Grigorios Loukides

   Pages 1-14

3. Privacy in Data Sharing

   1. Front Matter

      Pages 15-15

      PDF

   2. A Survey of Anonymization Algorithms for Electronic Health Records

      • Aris Gkoulalas-Divanis, Grigorios Loukides

      Pages 17-34

   3. Differentially Private Histogram and Synthetic Data Publication

      • Haoran Li, Li Xiong, Xiaoqian Jiang

      Pages 35-58

   4. Evaluating the Utility of Differential Privacy: A Use Case Study of a Behavioral Science Dataset

      • Raquel Hill

      Pages 59-82

   5. SECRETA: A Tool for Anonymizing Relational, Transaction and RT-Datasets

      • Giorgos Poulis, Aris Gkoulalas-Divanis, Grigorios Loukides, Spiros Skiadopoulos, Christos Tryfonopoulos

      Pages 83-109

   6. Putting Statistical Disclosure Control into Practice: The ARX Data Anonymization Tool

      • Fabian Prasser, Florian Kohlmayer

      Pages 111-148

   7. Utility-Constrained Electronic Health Record Data Publishing Through Generalization and Disassociation

      • Grigorios Loukides, John Liagouris, Aris Gkoulalas-Divanis, Manolis Terrovitis

      Pages 149-177

   8. Methods to Mitigate Risk of Composition Attack in Independent Data Publications

      • Jiuyong Li, Sarowar A. Sattar, Muzammil M. Baig, Jixue Liu, Raymond Heatherly, Qiang Tang et al.

      Pages 179-200

   9. Statistical Disclosure Limitation for Health Data: A Statistical Agency Perspective

      • Natalie Shlomo

      Pages 201-230

4. Privacy in Distributed and Dynamic Settings

   1. Front Matter

      Pages 231-231

      PDF

   2. A Review of Privacy Preserving Mechanisms for Record Linkage

      • Luca Bonomi, Liyue Fan, Li Xiong

      Pages 233-265

   3. Application of Privacy-Preserving Techniques in Operational Record Linkage Centres

      • James H. Boyd, Sean M. Randall, Anna M. Ferrante

      Pages 267-287

   4. Privacy Considerations for Health Information Exchanges

      • Dalvin Hill, Joseph Walker, John Hale

      Pages 289-311

   5. Managing Access Control in Collaborative Processes for Healthcare Applications

      • Xuan Hung Le, Dongwen Wang

      Pages 313-359

   6. Automating Consent Management Lifecycle for Electronic Healthcare Systems

      • Muhammad Rizwan Asghar, Giovanni Russello

      Pages 361-387

   7. e-Health Cloud: Privacy Concerns and Mitigation Strategies

      • Assad Abbas, Samee U. Khan

      Pages 389-421

5. Privacy for Emerging Applications

   1. Front Matter

      Pages 423-423

      PDF

   2. Preserving Genome Privacy in Research Studies

      • Shuang Wang, Xiaoqian Jiang, Dov Fox, Lucila Ohno-Machado

      Pages 425-441

This handbook covers Electronic Medical Record (EMR) systems, which enable the storage, management, and sharing of massive amounts of demographic, diagnosis, medication, and genomic information. It presents privacy-preserving methods for medical data, ranging from laboratory test results to doctors’ comments. The reuse of EMR data can greatly benefit medical science and practice, but must be performed in a privacy-preserving way according to data sharing policies and regulations. Written by world-renowned leaders in this field, each chapter offers a survey of a research direction or a solution to problems in established and emerging research areas. The authors explore scenarios and techniques for facilitating the anonymization of different types of medical data, as well as various data mining tasks. Other chapters present methods for emerging data privacy applications and medical text de-identification, including detailed surveys of deployed systems. A part of the book is devoted to legislative and policy issues, reporting on the US and EU privacy legislation and the cost of privacy breaches in the healthcare domain. This reference is intended for professionals, researchers and advanced-level students interested in safeguarding medical data.

• Data anonymization
• Data privacy
• Data sharing policies
• Deployed systems
• Disclosure risk assessment
• Electronic health data streams
• Electronic health networks
• Genomic privacy
• Medical IT
• Medical data privacy
• Medical image security
• Privacy legislation
• Text de-identification

“It provides one of the most comprehensive treatments of medical data privacy among books on the market today. … As a snapshot reflecting some of the most interesting and promising research that is currently going on in the field of medical data privacy, the book by Gkoulalas-Divanis and Loukides is a must-read. It also gives the reader a strong sense of the research directions that are being pursued and that are expected to bear fruit in the next few years.” (Khaled El Emam, Journal of Biomedical Informatics, June, 2016)

“This collection of chapters by 63 researchers has a primary focus on security and privacy issues within electronic medical records (EMR) database systems. … Researchers and advanced students will find this handbook useful. … this is a reference for anyone concerned with medical data privacy and should be on your bookshelf.” (Brad Reid,Computing Reviews, computingreviews.com, May, 2016)

• IBM Research - Ireland, Mulhuddart, Ireland

  Aris Gkoulalas-Divanis

• Cardiff University, Cardiff, United Kingdom

  Grigorios Loukides

Aris Gkoulalas-Divanis received the BS from the University of Ioannina (2003), the MS from the University of Minnesota (2005) and the PhD from the University of Thessaly (2009), all in Computer Science. His PhD dissertation was awarded the Certificate of Recognition and Honorable Mention in the 2009 ACM SIGKDD Dissertation Award. From 2009 to 2010, he was appointed as a postdoctoral research fellow in the Dept. of Biomedical Informatics, Vanderbilt University, working on medical data privacy. In 2010, he joined IBM Research-Zurich, as a Research Staff Member. Since 2012, he is working in the Smarter Cities Technology Center of IBM Research-Ireland, leading research in the area of data privacy and anonymization. Aris is a regular reviewer for several prestigious journals and serves in the program committee of major conferences. He has co-authored/co-edited 4 Springer books in the areas of data anonymization, knowledge hiding, and large-scale data mining.

Grigorios Loukides is an Assistant Professor in the School of Computer Science & Informatics at Cardiff University and a Royal Academy of Engineering Research Fellow. His research interests lie broadly in the field of data management with a focus on privacy. His recent research investigates theoretical and practical aspects of data privacy, including algorithmic design, optimization, and formal modeling, and explores applications in healthcare and business. He has received 4 best paper awards, including an award from the American Medical Informatics Association (AMIA) Annual Symposium, 2009. He obtained a Diploma in Computer Science (2005) from University of Crete, Greece, and a PhD in Computer Science (2009) from Cardiff University, UK.

Policies and ethics