Evidence map›Paper›PMID 18579830›Full record

ArticleJournal of the American Medical Informatics Association : JAMIA

Protecting privacy using k-anonymity.

Khaled El Emam, Fida Kamal Dankar

Abstract readComparative StudyEvaluation Study
In one paragraph

Article in Journal of the American Medical Informatics Association : JAMIA. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 80 papers, 2 of them syntheses that pooled it.

0numbers the graph read from it
0cells of the map it votes in
80citing papers in PubMed, 2 pooled it
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

80 citing papers in PubMed, 2 syntheses or guidelines pooled it.

  1. Pooled it
  2. Pooled it
  3. Article
  4. Review
  5. Article
  6. Article
  7. Article
  8. Review
  9. Review
  10. Article
  11. Article
  12. Article
  13. Article
  14. Review
  15. Article
  16. Article
  17. Article
  18. Enabling Health Data Sharing with Fine-Grained Privacy.Proceedings of the ... ACM International Conference on Information & Knowledge Management. ACM International Conference on Information and Knowledge Management · 2023
    Article
  19. Article
  20. Review

20 more citing papers are in PubMed but not listed here.

4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

2 authors.

Khaled El EmamChildren's Hospital of Eastern Ontario Research Institute, Ottawa, Ontario K1J 8L1, Canada. kelemam@uottawa.ca
Fida Kamal Dankar

Funding

No grant is acknowledged in the PubMed record.

6 · The paper itself

Abstract

objectiveThere is increasing pressure to share health information and even make it publicly available. However, such disclosures of personal health information raise serious privacy concerns. To alleviate such concerns, it is possible to anonymize the data before disclosure. One popular anonymization approach is k-anonymity. There have been no evaluations of the actual re-identification probability of k-anonymized data sets.

designThrough a simulation, we evaluated the re-identification risk of k-anonymization and three different improvements on three large data sets. MEASUREMENT: Re-identification probability is measured under two different re-identification scenarios. Information loss is measured by the commonly used discernability metric.

resultsFor one of the re-identification scenarios, k-Anonymity consistently over-anonymizes data sets, with this over-anonymization being most pronounced with small sampling fractions. Over-anonymization results in excessive distortions to the data (i.e., high information loss), making the data less useful for subsequent analysis. We found that a hypothesis testing approach provided the best control over re-identification risk and reduces the extent of information loss compared to baseline k-anonymity.

conclusionGuidelines are provided on when to use the hypothesis testing approach instead of baseline k-anonymity.

Indexed as

Computer SecurityConfidentialityInformation Storage and RetrievalMedical Records Systems, ComputerizedAlgorithmsComputer SimulationHumansOntarioRiskRisk Management

Identifiers

PMID18579830
PMCPMC2528029

What OpenQuestion holds

Textmetadata
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.