Abstract:Background: The last few years have witnessed an increasing number of clinical research networks (CRNs) focused on building large collections of data from electronic health records (EHRs), claims, and patient-reported outcomes (PROs). Many of these CRNs provide a service for the discovery of research cohorts with various health conditions, which is especially useful for rare diseases.Background: Supporting patient privacy can enhance the scalability and efficiency of such processes; however, current practice mainly relies on policy, such as guidelines defined in the Health Insurance Portability and Accountability Act (HIPAA), which are insufficient for CRNs (e.g., HIPAA does not require encryption of data which can mitigate insider threats). By combining policy with privacy enhancing technologies we can enhance the trustworthiness of CRNs. The goal of this research is to determine if searchable encryption can instill privacy in CRNs without sacrificing their usability.Methods: We developed a technique, implemented in working software to enable privacy-preserving cohort discovery (PPCD) services in large distributed CRNs based on elliptic curve cryptography (ECC). This technique also incorporates a block indexing strategy to improve the performance (in terms of computational running time) of PPCD. We evaluated the PPCD service with three real cohort definitions: (1) elderly cervical cancer patients who underwent radical hysterectomy, (2) oropharyngeal and tongue cancer patients who underwent robotic transoral surgery, and (3) female breast cancer patients who underwent mastectomy) with varied query complexity. These definitions were tested in an encrypted database of 7.1 million records derived from the publically available Healthcare Cost and Utilization Project (HCUP) Nationwide Inpatient Sample (NIS). We assessed the performance of the PPCD service in terms of (1) accuracy in cohort discovery, (2) computational running time, and (3) privacy. afforded to the underlying records during PPCD.Results: The empirical results indicate that the proposed PPCD can execute cohort discovery queries in a reasonable amount of time, with query runtime in the range of 165-262 s for the 3 use cases, with zero compromise in accuracy. We further show that the search performance is practical because it supports a highly parallelized design for secure evaluation over encrypted records. Additionally, our security analysis shows that the proposed construction is resilient to standard adversaries.Conclusions: PPCD services can be designed for clinical research networks. The security construction presented in this work specifically achieves high privacy guarantees by preventing both threats originating from within and beyond the network. (C) 2016 Elsevier Inc. All rights reserved.

Implementing a Hash-Based Privacy-Preserving Record Linkage Tool in the OneFlorida Clinical Research Network.

Establishing a Framework for Privacy-Preserving Record Linkage among Electronic Health Record and Administrative Claims Databases Within PCORnet®, the National Patient-Centered Clinical Research Network.

Assessing the Impact of Privacy-Preserving Record Linkage on Record Overlap and Patient Demographic and Clinical Characteristics in PCORnet®, the National Patient-Centered Clinical Research Network.

Implementing privacy preserving record linkage: Insights from Australian use cases

Privacy preserving record linkage for public health action: opportunities and challenges

Privacy-preserving record linkage across disparate institutions and datasets to enable a learning health system: The national COVID cohort collaborative (N3C) experience

A Hybrid-Approach for Privacy Preserving Record Linkage - A Case Study from Germany

Validating a novel deterministic privacy-preserving record linkage between administrative & clinical data: applications in stroke research

Designing an Algorithm to Preserve Privacy for Medical Record Linkage with Error-Prone Data.

An Enhanced Privacy-Preserving Record Linkage Approach for Multiple Databases

Proposed Framework for Adopting Privacy-Preserving Record Linkage for Public Health Action

Towards a Privacy Preserving Cohort Discovery Framework for Clinical Research Networks.

Data linkages between patient-powered research networks and health plans: a foundation for collaborative research

Privacy preserving interactive record linkage (PPIRL)

Linkability measures to assess the data characteristics for record linkage

Multi-Layer Privacy-Preserving Record Linkage with Clerical Review based on gradual information disclosure

CIDACS-RL: a novel indexing search and scoring-based record linkage system for huge datasets with high accuracy and scalability

Privacy-Preserving Linkage of Distributed Pseudonymised Datasets in a Virtual European Rare Disease Platform

Scalable Multi-Database Privacy-Preserving Record Linkage using Counting Bloom Filters

Privacy-preserving Deep Learning based Record Linkage

Multi-Party Privacy-Preserving Record Linkage Approach