Abstract:BACKGROUND Data science offers an unparalleled opportunity to identify new insights into many aspects of human life with recent advances in health care. Using data science in digital health raises significant challenges regarding data privacy, transparency, and trustworthiness. Recent regulations enforce the need for a clear legal basis for collecting, processing, and sharing data, for example, the European Union’s General Data Protection Regulation (2016) and the United Kingdom’s Data Protection Act (2018). For health care providers, legal use of the electronic health record (EHR) is permitted only in clinical care cases. Any other use of the data requires thoughtful considerations of the legal context and direct patient consent. Identifiable personal and sensitive information must be sufficiently anonymized. Raw data are commonly anonymized to be used for research purposes, with risk assessment for reidentification and utility. Although health care organizations have internal policies defined for information governance, there is a significant lack of practical tools and intuitive guidance about the use of data for research and modeling. Off-the-shelf data anonymization tools are developed frequently, but privacy-related functionalities are often incomparable with regard to use in different problem domains. In addition, tools to support measuring the risk of the anonymized data with regard to reidentification against the usefulness of the data exist, but there are question marks over their efficacy. OBJECTIVE In this systematic literature mapping study, we aim to alleviate the aforementioned issues by reviewing the landscape of data anonymization for digital health care. METHODS We used Google Scholar, Web of Science, Elsevier Scopus, and PubMed to retrieve academic studies published in English up to June 2020. Noteworthy gray literature was also used to initialize the search. We focused on review questions covering 5 bottom-up aspects: basic anonymization operations, privacy models, reidentification risk and usability metrics, off-the-shelf anonymization tools, and the lawful basis for EHR data anonymization. RESULTS We identified 239 eligible studies, of which 60 were chosen for general background information; 16 were selected for 7 basic anonymization operations; 104 covered 72 conventional and machine learning–based privacy models; four and 19 papers included seven and 15 metrics, respectively, for measuring the reidentification risk and degree of usability; and 36 explored 20 data anonymization software tools. In addition, we also evaluated the practical feasibility of performing anonymization on EHR data with reference to their usability in medical decision-making. Furthermore, we summarized the lawful basis for delivering guidance on practical EHR data anonymization. CONCLUSIONS This systematic literature mapping study indicates that anonymization of EHR data is theoretically achievable; yet, it requires more research efforts in practical implementations to balance privacy preservation and usability to ensure more reliable health care applications.

Mastering data privacy: leveraging K-anonymity for robust health data sharing

An anonymization-based privacy-preserving data collection protocol for digital health data

Privacy Gain Based Multi-Iterative k-Anonymization to Protect Respondents Privacy

K-Anonymity for Crowdsourcing Database

Privacy-enhancing K -Anonymization of Customer Data

Privacy-Preserving Hierarchical Anonymization Framework over Encrypted Data

Designing a Novel Approach Using a Greedy and Information-Theoretic Clustering-Based Algorithm for Anonymizing Microdata Sets

Privacy Protection of Healthcare Data over Social Networks Using Machine Learning Algorithms

Anonymizing Machine Learning Models

Study on K-Anonymity Models of Sharing Medical Information

Anonymization: The imperfect science of using data while preserving privacy

Privacy Risk Assessment for Synthetic Longitudinal Health Data

Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study (Preprint)

A Review of Anonymization for Healthcare Data

Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study

The Users' Perspective on the Privacy-Utility Trade-offs in Health Recommender Systems

Studying Privacy Aspects of Learned Knowledge Bases in the Context of Synthetic and Medical Data

Health Data Sharing towards Knowledge Creation

A secure distributed framework for achieving k-anonymity

Anonymously Analyzing Clinical Datasets

Towards Practical Privacy-Preserving Analytics for IoT and Cloud Based Healthcare Systems