ten things i have learned - replica-analytics.com · learning something new. what the adversary...

TEN THINGS I HAVE LEARNEDAbout De-identification

cc: Ashim D’Silva - https://unsplash.com/@randomlies?utm_source=haikudeck&utm_medium=referral&utm_campaign=api-credit

Khaled El Emam

1. PRIVACY ENHANCING TECHNOLOGIES (PETs)cc: Y'amal - https://www.flickr.com/photos/17856544@N00

PETS FOR SHARING1. Pseudonymization2. De-identification3. Data Synthesis

4. Federated Analysis5. Secure Computation

cc: Y'amal - https://www.flickr.com/photos/17856544@N00

2. Consent and Other Obligationscc: mlibbe - https://www.flickr.com/photos/27901749@N04

OBLIGATIONS• Consent• Security controls• Privacy controls• Contractual controls

cc: Luna*-- - https://www.flickr.com/photos/58683294@N00

BENEFITS OF PETS• Enable secondary uses and

disclosures that would otherwise not be possible

• Cut operating costs for secondary purposes by reducing obligations -sometimes significantly

cc: Jamie Street - https://unsplash.com/@jamie452?utm_source=haikudeck&utm_medium=referral&utm_campaign=api-credit

3. Identifiability and Zero Riskcc: MTSOfan - https://www.flickr.com/photos/8628862@N05

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

ASSESSING RISK1. No zero risk2. Justification for threshold3. Due diligence on how risk /

probability is measured

cc: Nico Time - https://www.flickr.com/photos/80845204@N07

4. Heterogeneity in Practicecc: Andrew Seaman - https://unsplash.com/@amseaman?utm_source=haikudeck&utm_medium=referral&utm_campaign=api-credit

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

threshold

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

threshold

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

0.25

0.25

0.25

0.25

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

0.25

0.25

0.25

0.25

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

0.4 0.4 0.2 0 0.6 1

end-user has no specific preferences on which criterion to optimize on

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

0.1

0.1

0.4

0.4

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

1 0.4 0.2 0.3 0 0.25

end-user optimizing on cost reduction and maximizing data utility

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

0.4

0.4

0.1

0.1

6 4 4 5 2 2

6 4 4 5 2 1

1 5 6 2 4 3

1 1 1 4 5 5

0 0.4 0.37 0.13 0.83 1

end-user optimizing on privacy protection and brand

5. IDENTITY DISCLOSURE ?

cc: recombiner - https://www.flickr.com/photos/64121517@N05

1. Identity disclosure

2. Attribute disclosure

3. Learning something new

4. Membership disclosure

cc: recombiner - https://www.flickr.com/photos/64121517@N05

Identity DisclosureWhat the adversary knows

–Hiroshi is in the data

–Hiroshi is Japanese

What the adversary learns

–Hiroshi is the first record

–Hiroshi’s income

28

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Attribute DisclosureWhat the adversary

knows

–Hiroshi is in the data

–Hiroshi was born in the

decade 1950-59

What the adversary learns

–Hiroshi has prostate

cancer29

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

Learning Something NewWhat the adversary knows

– Hiroshi is in the data

– Hiroshi was born in the

year 1959

– Hiroshi is male

– Hiroshi has an income of

$120k

What the adversary learns– Hiroshi is the first record

30

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

6. Regulatory Uncertaintyand Inconsistency

cc: ssalonso - https://www.flickr.com/photos/41303012@N00

7. SOCIAL LICENSE

cc: Thomas8047 - https://www.flickr.com/photos/93482748@N02

8. CHANGES IN THE ENVIRONMENT

cc: kevin dooley - https://www.flickr.com/photos/12836528@N00

9. ALGORITHMS MATTER

cc: Jacob Joaquin - https://www.flickr.com/photos/61198674@N00

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

threshold

INNOVATION CONTINUEScc: Brett Jordan - https://unsplash.com/@brett_jordan?utm_source=haikudeck&utm_medium=referral&utm_campaign=api-credit

Special Issue onPrivacy Enhancing Technologies

10. Privacy As a Competitive Advantage

cc: joiseyshowaa - https://www.flickr.com/photos/30201239@N00

QUESTIONScc: an untrained eye - https://www.flickr.com/photos/26312642@N00

Electronic Health Information Laboratory, CHEO Research Institute, 401 Smyth Road, Ottawa K1H 8L1, Ontario; www.ehealthinformation.ca

kelemam@ehealthinformation.ca