title: Preserving temporal relations in clinical data while maintaining privacy.
abstract: Maintaining patient privacy is a challenge in large-scale observational research. To assist in reducing the risk of identifying study subjects through publicly available data, we introduce a method for obscuring date information for clinical events and patient characteristics.
  
  
  
  The method, which we call Shift and Truncate (SANT), obscures date information to any desired granularity. Shift and Truncate first assigns each patient a random shift value, such that all dates in that patient's record are shifted by that amount. Data are then truncated from the beginning and end of the data set.
  
  
  
  The data set can be proven to not disclose temporal information finer than the chosen granularity. Unlike previous strategies such as a simple shift, it remains robust to frequent - even daily - updates and robust to inferring dates at the beginning and end of date-shifted data sets. Time-of-day may be retained or obscured, depending on the goal and anticipated knowledge of the data recipient.
  
  
  
  The method can be useful as a scientific approach for reducing re-identification risk under the Privacy Rule of the Health Insurance Portability and Accountability Act and may contribute to qualification for the Safe Harbor implementation.
authors.affiliation: Department of Biomedical Informatics, Columbia University Medical Center, New York, NY 10032, USA hripcsak@columbia.edu.
authors.forename: George
authors.initials: G
authors.lastname: Hripcsak
authors.affiliation: Montefiore Medical Center/Albert Einstein College of Medicine, Bronx, New York, NY 10461, USA.
authors.forename: Parsa
authors.initials: P
authors.lastname: Mirhaji
authors.affiliation: Department of Healthcare Policy and Research, Weill Cornell Medical College, New York, NY 10065, USA.
authors.forename: Alexander Fh
authors.initials: AF
authors.lastname: Low
authors.affiliation: Department of Biomedical Informatics, School of Medicine, Vanderbilt University, Nashville, TN 37203, USA.|Department of Electrical Engineering and Computer Science, School of Engineering, Vanderbilt University, Nashville, TN 37203, USA.
authors.forename: Bradley A
authors.initials: BA
authors.lastname: Malin
mesh_terms: D003219:Confidentiality; D000068240:Data Anonymization; D057286:Electronic Health Records; D020408:Health Insurance Portability and Accountability Act; D006801:Humans; D008722:Methods; D064887:Observational Studies as Topic; D013995:Time; D014481:United States