help button home button JAMIA Hate scrolling?
HOME HELP FEEDBACK SUBSCRIPTIONS ARCHIVE SEARCH TABLE OF CONTENTS

First published October 18, 2004 as JAMIA PrePrint; doi:10.1197/jamia.M1603
This Article
Right arrow Full Text
Right arrow Full Text (PDF)
Right arrow All Versions of this Article:
M1603v1
12/1/28    most recent
Right arrow Submit a response
Right arrow Alert me when this article is cited
Right arrow Alert me when eLetters are posted
Right arrow Alert me if a correction is posted
Services
Right arrow Similar articles in this journal
Right arrow Similar articles in PubMed
Right arrow Alert me to new issues of the journal
Right arrow Download to citation manager
Right arrow reprints & permissions
Citing Articles
Right arrow Citing Articles via HighWire
Right arrow Citing Articles via Google Scholar
Google Scholar
Right arrow Articles by Malin, B. A.
Right arrow Search for Related Content
PubMed
Right arrow PubMed Citation
Right arrow Articles by Malin, B. A.
J Am Med Inform Assoc. 2005;12:28-34. DOI 10.1197/jamia.M1603.
© 2005 American Medical Informatics Association


Technical Evaluation

An Evaluation of the Current State of Genomic Data Privacy Protection Technology and a Roadmap for the Future

Bradley A. Malin, MS, MPhil

Affiliation of the author: Data Privacy Laboratory, School of Computer Science, Carnegie Mellon University, Pittsburgh, PA.

Correspondence and reprints: Bradley Malin, MS, MPhil, Carnegie Mellon University, School of Computer Science, Institute for Software Research International, Wean Hall Room 1320 B, Pittsburgh, PA 15213-3890; e-mail: <malin{at}cs.cmu.edu>.

Received for publication: 04/09/04; accepted for publication: 08/21/04.

The incorporation of genomic data into personal medical records poses many challenges to patient privacy. In response, various systems for preserving patient privacy in shared genomic data have been developed and deployed. Although these systems de-identify the data by removing explicit identifiers (e.g., name, address, or Social Security number) and incorporate sound security design principles, they suffer from a lack of formal modeling of inferences learnable from shared data. This report evaluates the extent to which current protection systems are capable of withstanding a range of re-identification methods, including genotype–phenotype inferences, location–visit patterns, family structures, and dictionary attacks. For a comparative re-identification analysis, the systems are mapped to a common formalism. Although there is variation in susceptibility, each system is deficient in its protection capacity. The author discovers patterns of protection failure and discusses several of the reasons why these systems are susceptible. The analyses and discussion within provide guideposts for the development of next-generation protection methods amenable to formal proofs.




This article has been cited by other articles:


Home page
Hum Mol GenetHome page
M. W. Foster and R. R. Sharp
Ethical issues in medical-sequencing research: implications of genotype-phenotype studies for individuals and populations.
Hum. Mol. Genet., April 15, 2006; 15(suppl_1): R45 - R49.
[Abstract] [Full Text] [PDF]




HOME HELP FEEDBACK SUBSCRIPTIONS ARCHIVE SEARCH TABLE OF CONTENTS
Copyright © 2005 by the American Medical Informatics Association.