title: Managing protected health information in distributed research network environments: automated review to facilitate collaboration.
abstract: BACKGROUND
  Multi-site health sciences research is becoming more common, as it enables investigation of rare outcomes and diseases and new healthcare innovations. Multi-site research usually involves the transfer of large amounts of research data between collaborators, which increases the potential for accidental disclosures of protected health information (PHI). Standard protocols for preventing release of PHI are extremely vulnerable to human error, particularly when the shared data sets are large.
  
  
  METHODS
  To address this problem, we developed an automated program (SAS macro) to identify possible PHI in research data before it is transferred between research sites. The macro reviews all data in a designated directory to identify suspicious variable names and data patterns. The macro looks for variables that may contain personal identifiers such as medical record numbers and social security numbers. In addition, the macro identifies dates and numbers that may identify people who belong to small groups, who may be identifiable even in the absences of traditional identifiers.
  
  
  RESULTS
  Evaluation of the macro on 100 sample research data sets indicated a recall of 0.98 and precision of 0.81.
  
  
  CONCLUSIONS
  When implemented consistently, the macro has the potential to streamline the PHI review process and significantly reduce accidental PHI disclosures.
authors.affiliation: Mid-Atlantic Permanente Research Institute, Kaiser Permanente in the Mid-Atlantic States, Rockville, MD, USA. Christine.E.Bredfeldt@kp.org
authors.forename: Christine E
authors.initials: CE
authors.lastname: Bredfeldt
authors.forename: Amy
authors.initials: A
authors.lastname: Butani
authors.forename: Sandhyasree
authors.initials: S
authors.lastname: Padmanabhan
authors.forename: Paul
authors.initials: P
authors.lastname: Hitz
authors.forename: Roy
authors.initials: R
authors.lastname: Pardee
mesh_terms: D003219:Confidentiality / Q000941:ethics*; D003299:Cooperative Behavior; D063025:Health Information Management; D006801:Humans; D033181:Information Dissemination / Q000941:ethics / Q000379:methods*; D015279:Organizational Culture; D012944:Social Support