New study looks at re-identification risks

Oct 14, 2009

A recent study led by Dr. Khaled El Emam, the Canada Research Chair in Electronic Health Information at the CHEO Research Institute, found that the information in hospital prescription records can quite easily re-identify patients.

Information on drug prescriptions are a highly sought after commodity. Pharmaceutical companies like to access this data to fine tune their marketing and sales efforts. Many retail pharmacies in Canada sell their prescription records to commercial data aggregators who perform analyses for pharmaceutical companies; the potential privacy risk with such a practice is if the patients can be re-identified from this data. There is now more demand for this data from hospital pharmacies as well.

Dr. El Emam's study, titled "Evaluating the Risk of Re-identification of Patients from Hospital Prescription Records", demonstrates the importance of ensuring the proper de-identification of . The study demonstrates a methodology for deciding which data to keep and which to de-identify, since hospital prescription data contains details such as where patients live and when they were admitted to the hospital.

"A meaningful risk analysis requires an understanding of the nature of plausible re-identification scenarios" explained Dr. El Emam "and is typically performed with a hospital's privacy officer to ensure that the risk to patient re-identification remains as low as possible."

The risk analysis performed in this study provided a way to anonymize the hospital prescription data to maintain the privacy of the patients, by generalizing and removing some variables such as postal codes, admission and discharge dates, or gender, before they are shared with outside companies.

Dr. El Emam's first article was published in the July-August issue of the Canadian Journal of Hospital Pharmacy and explains how he went about analyzing the data and finding the right combination of variables to ensure the privacy of hospital patients.

In a different study published earlier this year titled "Evaluating predictors of geographic area population size cutoffs to manage re-identification risk" Dr. El Emam performed the same risk analysis on the information released by retail pharmacies in Canada. The conclusion was that the risk of re-identifying patients from these prescription records was very small, and the privacy risks were consequently also small. This highlights the point that privacy risks in prescription records does depend on the source: retail vs. hospital.

Source: Children's Hospital of Eastern Ontario Research Institute

Explore further: New research demonstrates benefits of national and international device registries

add to favorites email to friend print save as pdf

Related Stories

New method assesses risks for heart failure patients

Jul 30, 2008

Data from 260 hospitals across the United States has led to the creation of a new method for physicians to more accurately determine the severity of heart failure in patients upon hospital admission, with a goal of reducing ...

Myth busted: Some drugs do cost more in Canada

Sep 29, 2008

(PhysOrg.com) -- Canada may be recognized as a bargain hunters' paradise for prescription drugs, but a new U of T study suggests that many generic medications may be more expensive in Canada than in the U.S. The uninsured ...

Hospital patients are discharged earlier on busier days

Sep 25, 2008

When a hospital is capacity constrained, the constraint can affect admission and discharge decisions. A new study in the RAND Journal of Economics examined how hospitals' admission and discharge behavior is affected by flu ...

Patient privacy assured by electronic censor

Jul 24, 2008

Newly developed software will help to allay patients' fears about who has access to their confidential data. Research published today in the open access journal BMC Medical Informatics and Decision Making describes a comp ...

Protecting patient privacy the new fashioned way

Sep 25, 2008

Protecting patient privacy has been recognized as the duty of health-care providers for about as long as doctors have seen patients. In 1996 that duty became a legal obligation when Congress passed the Health Insurance Portability ...

Recommended for you

New approach to particle therapy dosimetry

Dec 19, 2014

Researchers at the National Physical Laboratory (NPL), in collaboration with EMRP partners, are working towards a universal approach to particle beam therapy dosimetry.

Supplement maker admits lying about ingredients

Dec 17, 2014

Federal prosecutors say the owner and president of a dietary supplement company has admitted his role in the sale of diluted and adulterated dietary ingredients and supplements sold by his company.

User comments : 0

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.