Evidence map›Paper›PMID 22511018›Full record

ArticleJournal of the American Medical Informatics Association : JAMIA

Protecting count queries in study design.

Staal A Vinterbo, Anand D Sarwate, Aziz A Boxwala

Abstract read
In one paragraph

Article in Journal of the American Medical Informatics Association : JAMIA. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 14 papers, 1 of them a synthesis that pooled it.

0numbers the graph read from it
0cells of the map it votes in
14citing papers in PubMed, 1 pooled it
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

14 citing papers in PubMed, 1 synthesis or guideline pooled it.

  1. Pooled it
  2. Privacy-Enhancing Technologies in Biomedical Data Science.Annual review of biomedical data science · 2024
    Review
  3. Differential privacy in health research: A scoping review.Journal of the American Medical Informatics Association : JAMIA · 2021
    Article
  4. Article
  5. Privacy Policy and Technology in Biomedical Data Science.Annual review of biomedical data science · 2018
    Article
  6. Article
  7. Article
  8. Article
  9. Privacy preserving RBF kernel support vector machine.BioMed research international · 2014
    Article
  10. Article
  11. Article
  12. Article
  13. SHARE: system design and case studies for statistical health information release.Journal of the American Medical Informatics Association : JAMIA · 2013
    Article
  14. Grid Binary LOgistic REgression (GLORE): building shared models without sharing data.Journal of the American Medical Informatics Association : JAMIA
    Article
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

3 authors.

Staal A VinterboDivision of Biomedical Informatics, Department of Medicine, University of California San Diego, La Jolla, California 92093-0728, USA. sav@ucsd.edu
Anand D Sarwate
Aziz A Boxwala

Funding

iDASH: Integrating Data for Analysis, Anonymization, and SharingU54HL108460 · NHLBI · UNIVERSITY OF CALIFORNIA, SAN DIEGO · PI OHNO-MACHADO, LUCILA · 2010 to 2015
$19.1M
SAN DIEGO CLINICAL AND TRANSLATIONAL RESEARCH INSTITUTEUL1RR031980 · NCRR · UNIVERSITY OF CALIFORNIA, SAN DIEGO · PI FIRESTEIN, GARY S · 2010 to 2011
$14.0M
Preserving Privacy in Medical Data SetsR01LM007273 · NLM · UNIVERSITY OF CALIFORNIA, SAN DIEGO · PI VINTERBO, STAAL A · 2002 to 2008
$2.1M
NCRR NIH HHS UL1 RR031980NCRR NIH HHS UL1RR031980NHLBI NIH HHS U54 HL108460NLM NIH HHS R01 LM007273NLM NIH HHS R01 LM07273
6 · The paper itself

Abstract

objectiveToday's clinical research institutions provide tools for researchers to query their data warehouses for counts of patients. To protect patient privacy, counts are perturbed before reporting; this compromises their utility for increased privacy. The goal of this study is to extend current query answer systems to guarantee a quantifiable level of privacy and allow users to tailor perturbations to maximize the usefulness according to their needs.

methodsA perturbation mechanism was designed in which users are given options with respect to scale and direction of the perturbation. The mechanism translates the true count, user preferences, and a privacy level within administrator-specified bounds into a probability distribution from which the perturbed count is drawn.

resultsUsers can significantly impact the scale and direction of the count perturbation and can receive more accurate final cohort estimates. Strong and semantically meaningful differential privacy is guaranteed, providing for a unified privacy accounting system that can support role-based trust levels. This study provides an open source web-enabled tool to investigate visually and numerically the interaction between system parameters, including required privacy level and user preference settings.

conclusionsQuantifying privacy allows system administrators to provide users with a privacy budget and to monitor its expenditure, enabling users to control the inevitable loss of utility. While current measures of privacy are conservative, this system can take advantage of future advances in privacy measurement. The system provides new ways of trading off privacy and utility that are not provided in current study design systems.

Indexed as

Biomedical ResearchConfidentialityHumansInformation Storage and RetrievalMedical Records Systems, ComputerizedModels, StatisticalResearch DesignSoftwareUser-Computer Interface

Identifiers

PMID22511018
PMCPMC3422502

What OpenQuestion holds

Textmetadata
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.