Abstract:BACKGROUND Data science offers an unparalleled opportunity to identify new insights into many aspects of human life with recent advances in health care. Using data science in digital health raises significant challenges regarding data privacy, transparency, and trustworthiness. Recent regulations enforce the need for a clear legal basis for collecting, processing, and sharing data, for example, the European Union’s General Data Protection Regulation (2016) and the United Kingdom’s Data Protection Act (2018). For health care providers, legal use of the electronic health record (EHR) is permitted only in clinical care cases. Any other use of the data requires thoughtful considerations of the legal context and direct patient consent. Identifiable personal and sensitive information must be sufficiently anonymized. Raw data are commonly anonymized to be used for research purposes, with risk assessment for reidentification and utility. Although health care organizations have internal policies defined for information governance, there is a significant lack of practical tools and intuitive guidance about the use of data for research and modeling. Off-the-shelf data anonymization tools are developed frequently, but privacy-related functionalities are often incomparable with regard to use in different problem domains. In addition, tools to support measuring the risk of the anonymized data with regard to reidentification against the usefulness of the data exist, but there are question marks over their efficacy. OBJECTIVE In this systematic literature mapping study, we aim to alleviate the aforementioned issues by reviewing the landscape of data anonymization for digital health care. METHODS We used Google Scholar, Web of Science, Elsevier Scopus, and PubMed to retrieve academic studies published in English up to June 2020. Noteworthy gray literature was also used to initialize the search. We focused on review questions covering 5 bottom-up aspects: basic anonymization operations, privacy models, reidentification risk and usability metrics, off-the-shelf anonymization tools, and the lawful basis for EHR data anonymization. RESULTS We identified 239 eligible studies, of which 60 were chosen for general background information; 16 were selected for 7 basic anonymization operations; 104 covered 72 conventional and machine learning–based privacy models; four and 19 papers included seven and 15 metrics, respectively, for measuring the reidentification risk and degree of usability; and 36 explored 20 data anonymization software tools. In addition, we also evaluated the practical feasibility of performing anonymization on EHR data with reference to their usability in medical decision-making. Furthermore, we summarized the lawful basis for delivering guidance on practical EHR data anonymization. CONCLUSIONS This systematic literature mapping study indicates that anonymization of EHR data is theoretically achievable; yet, it requires more research efforts in practical implementations to balance privacy preservation and usability to ensure more reliable health care applications.

Privacy Preserving Data Publishing Anonymization Methods for Limiting Malicious Attacks in Healthcare Records

A Review of Anonymization for Healthcare Data

An anonymization-based privacy-preserving data collection protocol for digital health data

Privacy Preservation in Publishing Electronic Health Records Based on Perturbation

Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study (Preprint)

Privacy-preserving Data Mining, Sharing and Publishing

Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study

Privacy Gain Based Multi-Iterative k-Anonymization to Protect Respondents Privacy

Preserving The Safety And Confidentiality Of Data Mining Information In Health Care: A literature review

Privacy Preservation for Outsourced Medical Data with Flexible Access Control

Privacy Preserving Risk Mitigation Approach for Healthcare Domain

Multi-level Privacy Preserving Data Publishing

Privacy-preserving data publishing: A survey of recent developments

A Summary of Privacy-Preserving Data Publishing in the Local Setting

Privacy Protection of Healthcare Data over Social Networks Using Machine Learning Algorithms

Using Data Anonymization in big data analytics security and privacy

Preserving Patient Privacy when Sharing Same-Disease Data

Medical Ethics Privacy Protection Based on Combining Distributed Randomization with K-Anonymity

Privacy Preserving Risk Mitigation Strategy for Access Control in E-Healthcare Systems

A Privacy-Preserving Data Sharing Solution for Mobile Healthcare

Individual privacy versus public good: protecting confidentiality in health research