title: Disassociation for electronic health record privacy.
abstract: The dissemination of Electronic Health Record (EHR) data, beyond the originating healthcare institutions, can enable large-scale, low-cost medical studies that have the potential to improve public health. Thus, funding bodies, such as the National Institutes of Health (NIH) in the U.S., encourage or require the dissemination of EHR data, and a growing number of innovative medical investigations are being performed using such data. However, simply disseminating EHR data, after removing identifying information, may risk privacy, as patients can still be linked with their record, based on diagnosis codes. This paper proposes the first approach that prevents this type of data linkage using disassociation, an operation that transforms records by splitting them into carefully selected subsets. Our approach preserves privacy with significantly lower data utility loss than existing methods and does not require data owners to specify diagnosis codes that may lead to identity disclosure, as these methods do. Consequently, it can be employed when data need to be shared broadly and be used in studies, beyond the intended ones. Through extensive experiments using EHR data, we demonstrate that our method can construct data that are highly useful for supporting various types of clinical case count studies and general medical analysis tasks.
authors.affiliation: School of Computer Science and Informatics, Cardiff University, United Kingdom. Electronic address: g.loukides@cs.cf.ac.uk.
authors.forename: Grigorios
authors.initials: G
authors.lastname: Loukides
authors.affiliation: Department of Electrical and Computer Engineering, NTUA, Greece. Electronic address: liagos@dblab.ece.ntua.gr.
authors.forename: John
authors.initials: J
authors.lastname: Liagouris
authors.affiliation: IBM Research - Ireland, Dublin, Ireland. Electronic address: arisdiva@ie.ibm.com.
authors.forename: Aris
authors.initials: A
authors.lastname: Gkoulalas-Divanis
authors.affiliation: IMIS, Research Center Athena, Greece. Electronic address: mter@imis.athena-innovation.gr.
authors.forename: Manolis
authors.initials: M
authors.lastname: Terrovitis
mesh_terms: D057286:Electronic Health Records; D006801:Humans; D018907:Privacy; D014481:United States
keywords: Diagnosis codes; Disassociation; Electronic health records; Privacy