Biomedical research has always relied on access to human biological materials and clinical information, resources that when combined form biobanks. In the past, it appears that investigators sometimes used these resources with relatively little oversight, and without the consent of the individuals from whom these materials and information were obtained. Several developments in the last ten to fifteen years have converged to place greater emphasis on the role of individual consent in the creation and use of biobanks. The most important (...) by far is the power of information technology, which has transformed our lives in almost every domain. In the research setting, it is now easy to abstract information from electronic medical records. Computers make it possible to analyze enormous datasets and have contributed in essential ways to the dramatic increases in our understanding of genomics and other areas of biomedical science. (shrink)

Organizations often release and receive medical data with all explicit identifiers, such as name, address, telephone number, and Social Security number, removed on the assumption that patient confidentiality is maintained because the resulting data look anonymous. However, in most of these cases, the remaining data can be used to reidenafy individuals by linking or matching the data to other data bases or by looking at unique characteristics found in the fields and records of the data base itself. When these less (...) apparent aspects are taken into account, each released record can map to many possible people, providing a level of anonymity that the recordholder determines. The greater the number of candidates per record, the more anonymous the data.I examine three general-purpose computer programs for maintaining patient confidentiality when disclosing electronic medical records: the Scrub System, which locates and suppresses or replaces personally identifying information in letters between doctors and in notes written by clinicians; the Datafly System, which generalizes values based on a profile of the data recipient at the time of disclosure; and the μ-Argus System, a somewhat similar system which is becoming a European standard for disclosing public use data. (shrink)