vix.ing · top · new · best · stats · spec

Strategies for maintaining patient privacy in i2b2

2011/10/08 by S. N. Murphy, Sue Murphy, Vivian S. Gainer +7
Computer Science · Health Professions · #Business #Computer science #Computer security #Confidentiality #Consistency (knowledge bases) #Electronic Health Records Systems #Health Insurance Portability and Accountability Act #Health care #Health informatics #Identification (biology) #Informatics #Information privacy #Internet privacy #Law #Mobile Health and mHealth Applications #Patient privacy #Political science #Privacy policy #Privacy-Preserving Technologies in Data

paper · pdf · doi:10.1136/amiajnl-2011-000316

openalex publication_date 2011/10/08 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/01

Abstract

BACKGROUND: The re-use of patient data from electronic healthcare record systems can provide tremendous benefits for clinical research, but measures to protect patient privacy while utilizing these records have many challenges. Some of these challenges arise from a misperception that the problem should be solved technically when actually the problem needs a holistic solution. OBJECTIVE: The authors' experience with informatics for integrating biology and the bedside (i2b2) use cases indicates that the privacy of the patient should be considered on three fronts: technical de-identification of the data, trust in the researcher and the research, and the security of the underlying technical platforms. METHODS: The security structure of i2b2 is implemented based on consideration of all three fronts. It has been supported with several use cases across the USA, resulting in five privacy categories of users that serve to protect the data while supporting the use cases. RESULTS: The i2b2 architecture is designed to provide consistency and faithfully implement these user privacy categories. These privacy categories help reflect the policy of both the Health Insurance Portability and Accountability Act and the provisions of the National Research Act of 1974, as embodied by current institutional review boards. CONCLUSION: By implementing a holistic approach to patient privacy solutions, i2b2 is able to help close the gap between principle and practice.

Citations