Skip to main content

Main menu

  • Home
  • Content
    • Current issue
    • Past issues
    • Early releases
    • Collections
    • Sections
    • Blog
    • Infographics & illustrations
    • Podcasts
    • COVID-19 Articles
  • Authors
    • Overview for authors
    • Submission guidelines
    • Submit a manuscript
    • Forms
    • Editorial process
    • Editorial policies
    • Peer review process
    • Publication fees
    • Reprint requests
    • Open access
  • CMA Members
    • Overview for members
    • Earn CPD Credits
    • Print copies of CMAJ
  • Subscribers
    • General information
    • View prices
  • Alerts
    • Email alerts
    • RSS
  • JAMC
    • À propos
    • Numéro en cours
    • Archives
    • Sections
    • Abonnement
    • Alertes
    • Trousse média 2022
  • CMAJ JOURNALS
    • CMAJ Open
    • CJS
    • JAMC
    • JPN

User menu

Search

  • Advanced search
CMAJ
  • CMAJ JOURNALS
    • CMAJ Open
    • CJS
    • JAMC
    • JPN
CMAJ

Advanced Search

  • Home
  • Content
    • Current issue
    • Past issues
    • Early releases
    • Collections
    • Sections
    • Blog
    • Infographics & illustrations
    • Podcasts
    • COVID-19 Articles
  • Authors
    • Overview for authors
    • Submission guidelines
    • Submit a manuscript
    • Forms
    • Editorial process
    • Editorial policies
    • Peer review process
    • Publication fees
    • Reprint requests
    • Open access
  • CMA Members
    • Overview for members
    • Earn CPD Credits
    • Print copies of CMAJ
  • Subscribers
    • General information
    • View prices
  • Alerts
    • Email alerts
    • RSS
  • JAMC
    • À propos
    • Numéro en cours
    • Archives
    • Sections
    • Abonnement
    • Alertes
    • Trousse média 2022
  • Visit CMAJ on Facebook
  • Follow CMAJ on Twitter
  • Follow CMAJ on Pinterest
  • Follow CMAJ on Youtube
  • Follow CMAJ on Instagram
News

Privacy concerns raised over “secondary use” of health records

Ann Silversides
CMAJ December 08, 2009 181 (12) E287; DOI: https://doi.org/10.1503/cmaj.109-3089
Ann Silversides
  • Find this author on Google Scholar
  • Find this author on PubMed
  • Search for this author on this site
  • Article
  • Figures & Tables
  • Responses
  • Metrics
  • PDF
Loading

It took no time at all for Dr. Khaled El Emam’s colleague to identify an infant who had been a patient at the Children’s Hospital of Eastern Ontario (CHEO) in Ottawa.

But there was a major problem: The colleague had identified the infant from a prescription record and discharge data that was believed to be anonymous or, in privacy jargon, “de-identified.”

“We asked if anyone in the office knew a child who had been admitted to CHEO during the period [of the data set]. Somebody said yes, my neighbour’s one-year-old girl, at this postal code, around this time. We re-identified her and found all her drugs and her diagnosis,” says Dr. El Emam, a Canada research chair in electronic health information at the University of Ottawa’s faculty of medicine.

The data sets had been requested in mid-2008 by Brogan Inc., a private Ottawa-based commercial research firm. The company indicated that the same data had already been obtained from 100 hospitals across Canada, El Emam says.

“Without a formal analysis of the risk of re-identification, assurances of data anonymity may not be accurate,” he stated in an recent article detailing the episode (Can J Hosp Pharm 2009; 62:307–19).

The increase in secondary use of health care data is forcing institutions to become more cognizant of privacy issues, El Emam says. Data can be used as a revenue source, for health research (in areas such as postmarket surveillance of drugs), or to facilitate management and improve patient care, he adds. But because obtaining consent from patients is not possible with secondary use of health care data, the only privacy safeguard is de-identification.

In the United Kingdom, the electronic medical record system was built to facilitate the use of data for research, he adds. Canada, by contrast, must retrofit its health records to ensure privacy.

Figure
  • Download figure
  • Open in new tab
  • Download powerpoint

Staff at the Children’s Hospital of Eastern Ontario were readily able to identify an infant from prescription and discharge data that was believed to be anonymous. Image courtesy of © 2009 Jupiterimages Corp.

El Emam’s team “generalized” data provided to Brogan Inc. by, for example, including region instead of a full postal code, age in weeks instead of days and quarter and year of admission instead of day, month and year.

In exchange for providing the prescription and discharge data, Brogan will provide CHEO with benchmarking information comparing it with other pediatric hospitals on important issues such as “finding out what drugs are used for what purposes,” dosage, length of stay and health outcomes, El Eman says. Under the agreement, Brogan Inc. cannot resell the raw data from CHEO, although it could produce analyses and reports.

El Emam says CHEO is eager to obtain benchmarked information since “there aren’t many studies on the right dosage for particular drugs for children” and between 60%–70% of drugs are now prescribed to children on an “off label” basis because few pharmaceuticals are tested on children before being marketed.

“Generally speaking, hospitals are really horrible at using data. They have a lot of data sets but have never integrated them,” says El Eman. “Very few hospitals are managed by data.”

Tom Brogan, president of Brogan Inc., says there is “zero” likelihood that any information that leaves his company can allow a patient to be identified.

Any employee discovered trying to re-identify patients would be immediately fired, adds Brogan, who compares his firm’s statistical reports to those of the Canadian Institute for Health Information and the Toronto, Ontario-based Institute for Clinical Evaluative Sciences.

The firm also brokers prescription drug information obtained from public drug plans, insurance companies and pharmacies, Brogan adds. The company began collecting hospital data five years ago and has taken “extraordinary measures” to clean up and standardize the information.

But aggregating the data is “an unbelievable nightmare” because there are so many different ways that information such as date of birth or reasons for admission are entered, Brogan says.

Footnotes

  • Published at www.cmaj.ca on Oct. 26

PreviousNext
Back to top

In this issue

Canadian Medical Association Journal: 181 (12)
CMAJ
Vol. 181, Issue 12
8 Dec 2009
  • Table of Contents
  • Index by author

Article tools

Respond to this article
Print
Download PDF
Article Alerts
To sign up for email alerts or to access your current email alerts, enter your email address below:
Email Article

Thank you for your interest in spreading the word on CMAJ.

NOTE: We only request your email address so that the person you are recommending the page to knows that you wanted them to see it, and that it is not junk mail. We do not capture any email address.

Enter multiple addresses on separate lines or separate them with commas.
Privacy concerns raised over “secondary use” of health records
(Your Name) has sent you a message from CMAJ
(Your Name) thought you would like to see the CMAJ web site.
CAPTCHA
This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.
Citation Tools
Privacy concerns raised over “secondary use” of health records
Ann Silversides
CMAJ Dec 2009, 181 (12) E287; DOI: 10.1503/cmaj.109-3089

Citation Manager Formats

  • BibTeX
  • Bookends
  • EasyBib
  • EndNote (tagged)
  • EndNote 8 (xml)
  • Medlars
  • Mendeley
  • Papers
  • RefWorks Tagged
  • Ref Manager
  • RIS
  • Zotero
‍ Request Permissions
Share
Privacy concerns raised over “secondary use” of health records
Ann Silversides
CMAJ Dec 2009, 181 (12) E287; DOI: 10.1503/cmaj.109-3089
Digg logo Reddit logo Twitter logo Facebook logo Google logo Mendeley logo
  • Tweet Widget
  • Facebook Like

Jump to section

  • Article
    • Footnotes
  • Figures & Tables
  • Responses
  • Metrics
  • PDF

Related Articles

  • No related articles found.
  • PubMed
  • Google Scholar

Cited By...

  • No citing articles found.
  • Google Scholar

More in this TOC Section

  • The evolving picture of long COVID
  • When are shared decisions false choices?
  • Q&A: As a doctor in a war zone “you have to come to grips with your limitations”
Show more News

Similar Articles

 

View Latest Classified Ads

Content

  • Current issue
  • Past issues
  • Collections
  • Sections
  • Blog
  • Podcasts
  • Alerts
  • RSS
  • Early releases

Information for

  • Advertisers
  • Authors
  • Reviewers
  • CMA Members
  • Media
  • Reprint requests
  • Subscribers

About

  • General Information
  • Journal staff
  • Editorial Board
  • Advisory Panels
  • Governance Council
  • Journal Oversight
  • Careers
  • Contact
  • Copyright and Permissions
  • Accessibiity
  • CMA Civility Standards
CMAJ Group

Copyright 2022, CMA Impact Inc. or its licensors. All rights reserved. ISSN 1488-2329 (e) 0820-3946 (p)

All editorial matter in CMAJ represents the opinions of the authors and not necessarily those of the Canadian Medical Association or its subsidiaries.

To receive any of these resources in an accessible format, please contact us at CMAJ Group, 500-1410 Blair Towers Place, Ottawa ON, K1J 9B9; p: 1-888-855-2555; e: cmajgroup@cmaj.ca

Powered by HighWire