title: Anonymization for outputs of population health and health services research conducted via an online data center.
abstract: OBJECTIVE
  Online data centers (ODCs) are becoming increasingly popular for making health-related data available for research. Such centers provide good privacy protection during analysis by trusted researchers, but privacy concerns may still remain if the system outputs are not sufficiently anonymized. In this article, we propose a method for anonymizing analysis outputs from ODCs for publication in academic literature.
  
  
  METHODS
  We use as a model system the Secure Unified Research Environment, an online computing system that allows researchers to access and analyze linked health-related data for approved studies in Australia. This model system suggests realistic assumptions for an ODC that, together with literature and practice reviews, inform our solution design.
  
  
  RESULTS
  We propose a two-step approach to anonymizing analysis outputs from an ODC. A data preparation stage requires data custodians to apply some basic treatments to the dataset before making it available. A subsequent output anonymization stage requires researchers to use a checklist at the point of downloading analysis output. The checklist assists researchers with highlighting potential privacy concerns, then applying appropriate anonymization treatments.
  
  
  CONCLUSIONS
  The checklist can be used more broadly in health care research, not just in ODCs. Ease of online publication as well as encouragement from journals to submit supplementary material are likely to increase both the volume and detail of analysis results publicly available, which in turn will increase the need for approaches such as the one suggested in this paper.
authors.affiliation: CSIRO, Canberra.
authors.forename: Christine M
authors.initials: CM
authors.lastname: O'Keefe
authors.affiliation: CSIRO, Canberra.
authors.forename: Mark
authors.initials: M
authors.lastname: Westcott
authors.affiliation: Sydney.
authors.forename: Maree
authors.initials: M
authors.lastname: O'Sullivan
authors.affiliation: Hobart, Australia.
authors.forename: Adrien
authors.initials: A
authors.lastname: Ickowicz
authors.affiliation: Sax Institute, Sydney, Australia.
authors.forename: Tim
authors.initials: T
authors.lastname: Churches
mesh_terms: D001315:Australia; D035843:Biomedical Research; D000068240:Data Anonymization; D066264:Datasets as Topic; D006302:Health Services Research; D006801:Humans; D009862:Online Systems; D000075485:Population Health; D018907:Privacy
keywords: biomedical research; confidentiality; data anonymization; health services research; privacy