{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,4]],"date-time":"2026-09-04T03:40:22Z","timestamp":1788493222992,"version":"build-2803163510"},"reference-count":33,"publisher":"SAGE Publications","license":[{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"},{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/journals.sagepub.com\/page\/policies\/text-and-data-mining-license"}],"funder":[{"DOI":"10.13039\/100010269","name":"Wellcome Trust","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100010269","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100001448","name":"Alpha-1 Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100001448","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000265","name":"Medical Research Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000265","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000351","name":"British Lung Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000351","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000272","name":"National Institute for Health and Care Research","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000272","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100023699","name":"Health Data Research UK","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100023699","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["DIGITAL HEALTH"],"published-print":{"date-parts":[[2026,2]]},"abstract":"<jats:sec>\n                    <jats:title>Objective<\/jats:title>\n                    <jats:p>This study examined and illustrated real-world risks of unintended patient-level data egress from Trusted Research Environments (TREs) and Secure Data Environments (SDEs), using synthetic data to recreate cases encountered in PIONEER, the HDR UK Hub in Acute Care.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Methods<\/jats:title>\n                    <jats:p>Synthetic datasets with demographics and NEWS2 vital signs were created using SciPy and NumPy for two fictitious populations. These datasets were transformed for machine-learning and embedded into various formats to simulate potential egress scenarios. Three worked examples include binary serialisation of data, binary serialisation of complex objects, and plain text mark-up reports.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Results<\/jats:title>\n                    <jats:p>Initial screening of exported files included checking reported sizes. While absolute size alone cannot confirm patient-level data, unusually large files can signal the need for closer inspection. In several cases, this prompted manual review that uncovered sensitive information. File size is therefore a useful signal within a layered egress checking process, not a diagnostic measure. Standard tools like Python or R do not warn of hidden data, reinforcing the need for explicit egress policies and independent verification. Converting binary formats only works for recognized code libraries and requires ongoing maintenance. Manual inspection alongside automation remains essential to identify and remove embedded data.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Conclusion<\/jats:title>\n                    <jats:p>These cases highlight the complexities in identifying and preventing identifiable data egress from TREs. Key insights include clear guidance for researchers, the limitations of binary serialisation for egress due to security vulnerabilities, and the importance of plain-text data exports for ease of verification.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.1177\/20552076261440981","type":"journal-article","created":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T05:44:01Z","timestamp":1782279841000},"update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":1,"title":["Identifying patient-level data risks in trusted research environments: Worked examples with synthetic data"],"prefix":"10.1177","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4775-4742","authenticated-orcid":false,"given":"M.","family":"Baragilly","sequence":"first","affiliation":[{"name":"University of Birmingham"},{"name":"Capital University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"A.","family":"Topham","sequence":"additional","affiliation":[{"name":"University Hospitals Birmingham NHS Foundation Trust"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1026-4125","authenticated-orcid":false,"given":"S.","family":"Gallier","sequence":"additional","affiliation":[{"name":"University Hospitals Birmingham NHS Foundation Trust"},{"name":"University Hospitals Birmingham NHS Foundation Trust"},{"name":"University of Birmingham"},{"name":"University of Birmingham, School of Medical Sciences, Edgbaston, Birmingham, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3454-5482","authenticated-orcid":false,"given":"E.","family":"Sapey","sequence":"additional","affiliation":[{"name":"University Hospitals Birmingham NHS Foundation Trust"},{"name":"University of Birmingham"},{"name":"University of Birmingham"},{"name":"University Hospitals Birmingham NHS Foundation Trust"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"179","published-online":{"date-parts":[[2026,6,23]]},"reference":[{"key":"e_1_3_7_2_2","volume-title":"Better, Broader, Safer: Using health data for research and analysis. A review commissioned by the Secretary of State for Health and Social Care","author":"Goldacre B","year":"2022","unstructured":"Goldacre B. Better, Broader, Safer: Using health data for research and analysis. A review commissioned by the Secretary of State for Health and Social Care. Department of Health and Social Care, 2022."},{"key":"e_1_3_7_3_2","volume-title":"Policy Paper","author":"Department of Health & Social Care","year":"2023","unstructured":"Department of Health & Social Care. Policy Paper. Data access policy update, 2023. GOV.UK."},{"key":"e_1_3_7_4_2","doi-asserted-by":"publisher","DOI":"10.1057\/elmr.2008.73"},{"key":"e_1_3_7_5_2","doi-asserted-by":"publisher","DOI":"10.1186\/s40900-021-00281-2"},{"key":"e_1_3_7_6_2","doi-asserted-by":"publisher","DOI":"10.1136\/bmjhci-2020-100294"},{"key":"e_1_3_7_7_2","doi-asserted-by":"publisher","DOI":"10.23889\/ijpds.v8i2.2299"},{"key":"e_1_3_7_8_2","first-page":"20220825","article-title":"Introducing a new Trusted Research Environment - the Safe Haven Artificial Platform (SHAIP)","volume":"7","author":"Wilde K","year":"2022","unstructured":"Wilde K, Anderson L, Boyle M, et al. Introducing a new Trusted Research Environment - the Safe Haven Artificial Platform (SHAIP). Int J Popul Data Sci 2022; 7: 20220825. https:\/\/doi.org\/10.23889\/ijpds.v7i3.2056","journal-title":"Int J Popul Data Sci"},{"key":"e_1_3_7_9_2","doi-asserted-by":"publisher","DOI":"10.1186\/1472-6947-9-3"},{"key":"e_1_3_7_10_2","doi-asserted-by":"publisher","DOI":"10.23889\/ijpds.v7i3.1837"},{"key":"e_1_3_7_11_2","unstructured":"Honest Broker Service. Providing safe access to data from Health and Social Care in Northern Ireland for Research. https:\/\/bso.hscni.net\/directorates\/digital\/honest-broker-service\/ (accessed 22 09 2024)."},{"key":"e_1_3_7_12_2","unstructured":"NHS England. Accessing data for research and analysis. https:\/\/transform.england.nhs.uk\/key-tools-and-info\/data-saves-lives\/secure-data-environments\/accessing-data-for-research-and-analysis\/#:\u223c:text=The_NHS_Research_SDE_Network_is_an_interoperable_England%2Dwide ensure_consistent_standards_and_interoperability (accessed 22\/09\/2024)."},{"key":"e_1_3_7_13_2","doi-asserted-by":"publisher","DOI":"10.2196\/33720"},{"key":"e_1_3_7_14_2","unstructured":"Jefferson E Liley J Malone M et al. GRAIMATTER Green Paper: Recommendations for disclosure control of trained Machine Learning (ML) models from Trusted Research Environments (TREs). arXiv preprint arXiv:221101656 2022."},{"key":"e_1_3_7_15_2","first-page":"20181015","article-title":"Algorithms that remember: model inversion attacks and data protection law","volume":"376","author":"Veale M","year":"2018","unstructured":"Veale M, Binns R, Edwards L. Algorithms that remember: model inversion attacks and data protection law. Philos Trans A Math Phys Eng Sci 2018; 376: 20181015. https:\/\/doi.org\/10.1098\/rsta.2018.0083","journal-title":"Philos Trans A Math Phys Eng Sci"},{"key":"e_1_3_7_16_2","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.320.7237.768"},{"key":"e_1_3_7_17_2","volume-title":"Computer security: Art and Science","author":"Bishop M","year":"2003","unstructured":"Bishop M. Computer security: Art and Science. Addison-Wesley Professional, 2003."},{"key":"e_1_3_7_18_2","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300233"},{"key":"e_1_3_7_19_2","doi-asserted-by":"publisher","DOI":"10.1017\/dap.2021.37"},{"key":"e_1_3_7_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.57"},{"key":"e_1_3_7_21_2","volume-title":"Building Trusted Research Environments - Principles and Best Practices; Towards TRE ecosystems","author":"Varma S","year":"2021","unstructured":"Varma S, Hubbard T, Seymour D, et al. Building Trusted Research Environments - Principles and Best Practices; Towards TRE ecosystems. Health Data Research UK, 2021."},{"key":"e_1_3_7_22_2","doi-asserted-by":"publisher","DOI":"10.1145\/3546068"},{"key":"e_1_3_7_23_2","doi-asserted-by":"publisher","DOI":"10.1038\/s41592-019-0686-2"},{"key":"e_1_3_7_24_2","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-020-2649-2"},{"key":"e_1_3_7_25_2","unstructured":"Office for National Statistics. National identify variable: Census 2021. https:\/\/www.ons.gov.uk\/census\/census2021dictionary\/variablesbytopic\/ethnicgroupnationalidentitylanguageandreligionvariablescensus2021\/nationalidentity (2023 accessed 22 09 2024)."},{"key":"e_1_3_7_26_2","volume-title":"Guidance on AI and data protection","author":"Information Commissioner\u2019s Office","year":"2023","unstructured":"Information Commissioner\u2019s Office. Guidance on AI and data protection. https:\/\/ico.org.uk\/for-organisations\/uk-gdpr-guidance-and-resources\/artificial-intelligence\/guidance-on-ai-and-data-protection\/how-should-we-assess-security-and-data-minimisation-in-ai\/ (2023, accessed 22 09 204)."},{"key":"e_1_3_7_27_2","unstructured":"International Organization for Standardization. ISO\/IEC 29500-1:2016. Information technology \u2014 Document description and processing languages \u2014 Office Open XML File Formats. https:\/\/www.iso.org\/standard\/71691.html (2022 accessed 22 09 2024)."},{"key":"e_1_3_7_28_2","doi-asserted-by":"publisher","DOI":"10.23889\/ijpds.v7i3.2005"},{"key":"e_1_3_7_29_2","unstructured":"Rolan G Dalins J Wilson C. The Data Airlock: infrastructure for restricted data informatics. arXiv preprint arXiv:220309006 2022."},{"key":"e_1_3_7_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/3351095.3372840"},{"key":"e_1_3_7_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/3442188.3445937"},{"key":"e_1_3_7_32_2","unstructured":"Griffiths E Greci C Kotrotsios Y et al. Handbook on statistical disclosure control for outputs. Safe Data Access Professionals Working Group 2019."},{"key":"e_1_3_7_33_2","unstructured":"Oldfield K Robinson L Stokes P et al. Consensus Statement on the use of Automation when Checking the Disclosure Risk of Research Outputs. DARE UK (Data and Analytics Research Environments UK) 2023."},{"key":"e_1_3_7_34_2","doi-asserted-by":"publisher","DOI":"10.23889\/ijpds.v9i5.2609"}],"container-title":["DIGITAL HEALTH"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/20552076261440981","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.1177\/20552076261440981","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/20552076261440981","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T16:48:03Z","timestamp":1782578883000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.1177\/20552076261440981"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2]]},"references-count":33,"alternative-id":["10.1177\/20552076261440981"],"URL":"https:\/\/doi.org\/10.1177\/20552076261440981","relation":{},"ISSN":["2055-2076","2055-2076"],"issn-type":[{"value":"2055-2076","type":"print"},{"value":"2055-2076","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2]]},"article-number":"20552076261440981"}}