|
Abstract:
|
In order to protect the privacy of patients, the Health Insurance Portability and Accountability Act places restrictions on the use and sharing of patient data by members of the health care industry (e.g., hospitals, pharma companies, or marketing firms). In many situations, only "de-identified" data can be used. We present methods that have been used in practice to estimate the risk of patient re-identification and discuss solutions for keeping this risk below an acceptable minimum. We will focus on statistical safeguards that ensure patient privacy while retaining the ability for companies to conduct useful data analyses. Other safeguards (e.g., procedural, legal, etc.) may be touched briefly.
|
