title: A risk-based framework for biomedical data sharing.
abstract: The problem of biomedical data sharing is a form of gambling; on one hand it incurs the risk of privacy violations and on the other it stands to profit from knowledge discovery. In general, the risk of granting data access to a user depends heavily upon the data requested, the purpose for the access, the user requesting the data (user motives) and the security of the user's environment. While traditional manual biomedical data sharing processes (based on institutional review boards) are lengthy and demanding, the automated ones (known as honest broker systems) disregard the individualities of different requests and offer "one-size-fits-all" solutions to all data requestors. In this manuscript, we propose a conceptual risk-aware data sharing system; the system brings the concept of risk, from all contextual information surrounding a data request, into the data disclosure decision module. The decision module, in turn, imposes mitigation measures to counter the calculated risk.
authors.affiliation: College of IT, UAEU, P.O. Box 15551, Al Ain, United Arab Emirates. Electronic address: fida.dankar@uaeu.ac.ae.
authors.forename: Fida K
authors.initials: FK
authors.lastname: Dankar
authors.affiliation: Sidra Medical and Research Center, P.O. Box 26999, Doha, Qatar. Electronic address: rbadji@sidra.org.
authors.forename: Radja
authors.initials: R
authors.lastname: Badji
mesh_terms: D016494:Computer Security; D028744:Ethics Committees, Research; D006801:Humans; D033181:Information Dissemination; D018907:Privacy; D012306:Risk
keywords: Biomedical data; Context-aware privacy; Data disclosure control; Honest broker systems; Institutional review boards