Organizations often release and receive medical data with all explicit identifiers, such as name, address, telephone number, and Social Security number, removed on the assumption that patient confidentiality is maintained because the resulting data look anonymous. However, in most of these cases, the remaining data can be used to reidenafy individuals by linking or matching the data to other data bases or by looking at unique characteristics found in the fields and records of the data base itself. When these less (...) apparent aspects are taken into account, each released record can map to many possible people, providing a level of anonymity that the recordholder determines. The greater the number of candidates per record, the more anonymous the data.I examine three general-purpose computer programs for maintaining patient confidentiality when disclosing electronic medical records: the Scrub System, which locates and suppresses or replaces personally identifying information in letters between doctors and in notes written by clinicians; the Datafly System, which generalizes values based on a profile of the data recipient at the time of disclosure; and the μ-Argus System, a somewhat similar system which is becoming a European standard for disclosing public use data. (shrink)

Written by epidemiologists, ethicists and legal scholars, this book provides an in-depth account of the moral problems that often confront epidemiologists, including both theoretical and practical issues. The first edition has sold almost three thousand copies since it was published in 1996. This edition is fully revised and includes three new chapters:Ethical Issues in Public Health Practice, Ethical Issues in Genetic Epidemiology, and Ethical Issues in International Health Research and Epidemiology. These chapters collectively address important developments of the past decade. (...) Three chapters from the first edition have also been reorganized: Ethicall Optimized Study Deisgns in Epidemiology, Ethical Issues in Epidemiologic Research with Children, and The Ethics of Epidemiologic Research with Older Populations. Instead of standing alone, these chapters have been integrated into chapters on informed consent, confidentiality and privacy protection, and community-based intervention studies. (shrink)

A powerful movement is afoot to create a national computerized system of health records. Advocates claim it could save the health delivery system billions of dollars and improve the quality of health services. According to Lawrence Gostin, a leading commentator on privacy and health records, this new infrastructure is “already under way and [has] an aura of inevitability.” When it is in place, almost any information that is viewed as relevant to a decision in the health care delivery system would (...) be available to a large and yet undetermined number of individuals. The transformation of the collection and communication of health information from texts housed by health care providers and facilities to data electronically transmitted through networks of linked computers has significant implications for confidentiality and for data collection in scientific research. The best evidence clearly indicates that most people in the United States consider confidentiality for health information important and worry that the increased computerization of health records will result in inappropriate disclosure. (shrink)

A powerful movement is afoot to create a national computerized system of health records. Advocates claim it could save the health delivery system billions of dollars and improve the quality of health services. According to Lawrence Gostin, a leading commentator on privacy and health records, this new infrastructure is “already under way and [has] an aura of inevitability.” When it is in place, almost any information that is viewed as relevant to a decision in the health care delivery system would (...) be available to a large and yet undetermined number of individuals. The transformation of the collection and communication of health information from texts housed by health care providers and facilities to data electronically transmitted through networks of linked computers has significant implications for confidentiality and for data collection in scientific research. The best evidence clearly indicates that most people in the United States consider confidentiality for health information important and worry that the increased computerization of health records will result in inappropriate disclosure. (shrink)

Organizations often release and receive medical data with all explicit identifiers, such as name, address, telephone number, and Social Security number, removed on the assumption that patient confidentiality is maintained because the resulting data look anonymous. However, in most of these cases, the remaining data can be used to reidenafy individuals by linking or matching the data to other data bases or by looking at unique characteristics found in the fields and records of the data base itself. When these less (...) apparent aspects are taken into account, each released record can map to many possible people, providing a level of anonymity that the recordholder determines. The greater the number of candidates per record, the more anonymous the data.I examine three general-purpose computer programs for maintaining patient confidentiality when disclosing electronic medical records: the Scrub System, which locates and suppresses or replaces personally identifying information in letters between doctors and in notes written by clinicians; the Datafly System, which generalizes values based on a profile of the data recipient at the time of disclosure; and the μ-Argus System, a somewhat similar system which is becoming a European standard for disclosing public use data. (shrink)