{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T21:32:12Z","timestamp":1790890332343,"version":"4.1.0"},"reference-count":95,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2012,7,9]],"date-time":"2012-07-09T00:00:00Z","timestamp":1341792000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["BMC Med Inform Decis Mak"],"published-print":{"date-parts":[[2012,12]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:sec>\n                    <jats:title>Background<\/jats:title>\n                    <jats:p>De-identification is a common way to protect patient privacy when disclosing clinical data for secondary purposes, such as research. One type of attack that de-identification protects against is linking the disclosed patient data with public and semi-public registries. Uniqueness is a commonly used measure of re-identification risk under this attack. If uniqueness can be measured accurately then the risk from this kind of attack can be managed. In practice, it is often not possible to measure uniqueness directly, therefore it must be estimated.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Methods<\/jats:title>\n                    <jats:p>We evaluated the accuracy of uniqueness estimators on clinically relevant data sets. Four candidate estimators were identified because they were evaluated in the past and found to have good accuracy or because they were new and not evaluated comparatively before: the Zayatz estimator, slide negative binomial estimator, Pitman\u2019s estimator, and mu-argus. A Monte Carlo simulation was performed to evaluate the uniqueness estimators on six clinically relevant data sets. We varied the sampling fraction and the uniqueness in the population (the value being estimated). The median relative error and inter-quartile range of the uniqueness estimates was measured across 1000 runs.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Results<\/jats:title>\n                    <jats:p>There was no single estimator that performed well across all of the conditions. We developed a decision rule which selected between the Pitman, slide negative binomial and Zayatz estimators depending on the sampling fraction and the difference between estimates. This decision rule had the best consistent median relative error across multiple conditions and data sets.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Conclusion<\/jats:title>\n                    <jats:p>This study identified an accurate decision rule that can be used by health privacy researchers and disclosure control professionals to estimate uniqueness in clinical data sets. The decision rule provides a reliable way to measure re-identification risk.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.1186\/1472-6947-12-66","type":"journal-article","created":{"date-parts":[[2012,7,9]],"date-time":"2012-07-09T08:14:33Z","timestamp":1341821673000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":81,"title":["Estimating the re-identification risk of clinical data sets"],"prefix":"10.1186","volume":"12","author":[{"given":"Fida Kamal","family":"Dankar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khaled","family":"El Emam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Angelica","family":"Neisa","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tyson","family":"Roffey","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2012,7,9]]},"reference":[{"key":"521_CR1","unstructured":"Beyond the HIPAA Privacy Rule: Enhancing privacy, improving health through research. Edited by: Nass S, Levit L, Gostin L. 2009, Washington, DC: National Academies Press"},{"key":"521_CR2","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1016\/j.socscimed.2006.08.045","volume":"64","author":"L Damschroder","year":"2007","unstructured":"Damschroder L, Pritts J, Neblo M, Kalarickal R, Creswell J, Hayward R: Patients, privacy and trust: Patients' willingness to allow researchers to access their medical records. Soc Sci Med. 2007, 64: 223-235. 10.1016\/j.socscimed.2006.08.045.","journal-title":"Soc Sci Med"},{"key":"521_CR3","volume-title":"Privacy and Confidentiality Research and the US Census Bureau: Recommendations based on a review of the literature","author":"TS Mayer","year":"2002","unstructured":"Mayer TS: Privacy and Confidentiality Research and the US Census Bureau: Recommendations based on a review of the literature. 2002, Washington, DC: US Bureau of the Census"},{"key":"521_CR4","doi-asserted-by":"publisher","first-page":"368","DOI":"10.1086\/377465","volume":"67","author":"E Singer","year":"2003","unstructured":"Singer E, van Hoewyk J, Neugebauer RJ: Attitudes and Behaviour: The impact of privacy and confidentiality concenrs on participation in the 2000 census. Public Opin Q. 2003, 67: 368-384. 10.1086\/377465.","journal-title":"Public Opin Q"},{"key":"521_CR5","volume-title":"Privacy and Confidentiality as Factors in Survey Response","author":"Council. NR","year":"1979","unstructured":"Council. NR: Privacy and Confidentiality as Factors in Survey Response. 1979, Washington: National Academy of Sciences"},{"key":"521_CR6","volume-title":"Annual Meeting of the American Statistical Association","author":"E Martin","year":"2001","unstructured":"Martin E: Privacy Concerns and the Census Long Form: Some evidence from Census 2000. Annual Meeting of the American Statistical Association. 2001, Washington, DC"},{"issue":"46","key":"521_CR7","first-page":"6","volume":"35","author":"A Robeznieks","year":"2005","unstructured":"Robeznieks A: Privacy fear factor arises. Mod Healthc. 2005, 35 (46): 6-","journal-title":"Mod Healthc"},{"issue":"8","key":"521_CR8","first-page":"6","volume":"38","author":"C Becker","year":"2006","unstructured":"Becker C, Taylor M: Technical difficulties: Recent health IT security breaches are unlikely to improve the public's perception about the safety of personal data. Mod Healthc. 2006, 38 (8): 6-7.","journal-title":"Mod Healthc"},{"key":"521_CR9","volume-title":"Annual report to congress on breaches of unsecured protected health information for calendar years 2009 and 2010","author":"Office for Civil Rights","year":"2011","unstructured":"Office for Civil Rights: Annual report to congress on breaches of unsecured protected health information for calendar years 2009 and 2010. 2011, US Department of Health and Human Services"},{"key":"521_CR10","volume-title":"Sharing Research Data","author":"S Fienberg","year":"1985","unstructured":"Fienberg S, Martin M, Straf M: Sharing Research Data. 1985, Committee on National Statistics, National Research Council"},{"issue":"3","key":"521_CR11","doi-asserted-by":"publisher","first-page":"530","DOI":"10.1136\/bmj.322.7285.530","volume":"322","author":"D Hutchon","year":"2001","unstructured":"Hutchon D: Publishing raw data and real time statistical analysis on e-journals. Br Med J. 2001, 322 (3): 530-","journal-title":"Br Med J"},{"key":"521_CR12","doi-asserted-by":"crossref","unstructured":"Are journals doing enough to prevent fraudulent publication?. Can Med Assoc J. 2006, 174 (4): 431-","DOI":"10.1503\/cmaj.060085"},{"key":"521_CR13","first-page":"121","volume":"89","author":"K Abraham","year":"2005","unstructured":"Abraham K: Microdata access and labor market research: The US experience. Allegmeines Stat Archiv. 2005, 89: 121-139.","journal-title":"Allegmeines Stat Archiv"},{"key":"521_CR14","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1186\/1745-6215-7-15","volume":"7","author":"A Vickers","year":"2006","unstructured":"Vickers A: Whose data set is it anyway ? Sharing raw data from randomized trials. Trials. 2006, 7: 15-10.1186\/1745-6215-7-15.","journal-title":"Trials"},{"key":"521_CR15","doi-asserted-by":"publisher","first-page":"1069","DOI":"10.1136\/bmj.323.7320.1069a","volume":"323","author":"D Altman","year":"2001","unstructured":"Altman D, Cates C: Authors should make their data available. BMJ. 2001, 323: 1069-","journal-title":"BMJ"},{"key":"521_CR16","doi-asserted-by":"publisher","first-page":"1241","DOI":"10.1136\/bmj.312.7041.1241","volume":"312","author":"T Delamothe","year":"1996","unstructured":"Delamothe T: Whose data are they anyway ?. BMJ. 1996, 312: 1241-1242. 10.1136\/bmj.312.7041.1241.","journal-title":"BMJ"},{"key":"521_CR17","doi-asserted-by":"publisher","first-page":"1519","DOI":"10.1136\/bmj.308.6943.1519","volume":"308","author":"GD Smith","year":"1994","unstructured":"Smith GD: Increasing the accessibility of data. BMJ. 1994, 308: 1519-1520. 10.1136\/bmj.308.6943.1519.","journal-title":"BMJ"},{"key":"521_CR18","volume-title":"On scientific information in the digital age: Access, dissemination and preservation","author":"Commission of the European Communities","year":"2007","unstructured":"Commission of the European Communities: On scientific information in the digital age: Access, dissemination and preservation. 2007"},{"key":"521_CR19","volume-title":"Access to collections of data and materials for health research: A report to the Medical Research Council and the Wellcome Trust","author":"W Lowrance","year":"2006","unstructured":"Lowrance W: Access to collections of data and materials for health research: A report to the Medical Research Council and the Wellcome Trust. 2006, Medical Research Council and the Wellcome Trust"},{"issue":"26","key":"521_CR20","doi-asserted-by":"publisher","first-page":"1669","DOI":"10.1056\/NEJM198612253152608","volume":"315","author":"B Yolles","year":"1986","unstructured":"Yolles B, Connors J, Grufferman S: Obtaining access to data from government-sponsored medical research. NEJM. 1986, 315 (26): 1669-1672. 10.1056\/NEJM198612253152608.","journal-title":"NEJM"},{"issue":"Suppl. I","key":"521_CR21","doi-asserted-by":"publisher","first-page":"103S","DOI":"10.1016\/0895-4356(91)90183-A","volume":"44","author":"C Hogue","year":"1991","unstructured":"Hogue C: Ethical issues in sharing epidemiologic data. J Clin Epidemiol. 1991, 44 (Suppl. I): 103S-107S.","journal-title":"J Clin Epidemiol"},{"issue":"2","key":"521_CR22","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1007\/BF01073124","volume":"12","author":"T Hedrick","year":"1988","unstructured":"Hedrick T: Justifications for the sharing of social science data. Law Hum Behav. 1988, 12 (2): 163-171.","journal-title":"Law Hum Behav"},{"key":"521_CR23","volume-title":"Improving access to and confidentiality of research data: Report of a workshop","author":"C Mackie","year":"2000","unstructured":"Mackie C, Bradburn N: Improving access to and confidentiality of research data: Report of a workshop. 2000, Washington: The National Academies Press"},{"key":"521_CR24","volume-title":"Sorry, you can't have that information: Stakeholder awareness, perceptions and concerns regarding the disclosure and use of personal health information. e-Health 2006","author":"D Pullman","year":"2006","unstructured":"Pullman D: Sorry, you can't have that information: Stakeholder awareness, perceptions and concerns regarding the disclosure and use of personal health information. e-Health 2006. 2006"},{"key":"521_CR25","volume-title":"Highlights Report","author":"OIPC Stakeholder Survey, 2003","year":"2003","unstructured":"OIPC Stakeholder Survey, 2003: Highlights Report. 2003"},{"key":"521_CR26","doi-asserted-by":"publisher","first-page":"706","DOI":"10.1197\/jamia.M2457","volume":"14","author":"D Willison","year":"2007","unstructured":"Willison D, Schwartz L, Abelson J, Charles C, Swinton M, Northrup D, Thabane L: Alternatives to project-specific consent for access to personal information for health research: What is the opinion of the Canadian public ?. J Am Med Inform Assoc. 2007, 14: 706-712. 10.1197\/jamia.M2457.","journal-title":"J Am Med Inform Assoc"},{"issue":"1","key":"521_CR27","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1258\/135581904322716076","volume":"9","author":"K Nair","year":"2004","unstructured":"Nair K, Willison D, Holbrook A, Keshavjee K: Patients' consent preferences regarding the use of their health information for research purposes: A qualitative study. J Health Serv Res Policy. 2004, 9 (1): 22-27. 10.1258\/135581904322716076.","journal-title":"J Health Serv Res Policy"},{"key":"521_CR28","doi-asserted-by":"publisher","first-page":"429","DOI":"10.1111\/j.1748-720X.2003.tb00105.x","volume":"31","author":"N Kass","year":"2003","unstructured":"Kass N, Natowicz M, Hull S: The use of medical records in research: what do patients want?. J Law Med Ethics. 2003, 31: 429-433. 10.1111\/j.1748-720X.2003.tb00105.x.","journal-title":"J Law Med Ethics"},{"key":"521_CR29","doi-asserted-by":"publisher","first-page":"530","DOI":"10.1016\/j.ijmedinf.2005.08.009","volume":"75","author":"R Whiddett","year":"2006","unstructured":"Whiddett R, Hunter I, Engelbrecht J, Handy J: Patients' attitudes towards sharing their health information. Int J Med Inf. 2006, 75: 530-541. 10.1016\/j.ijmedinf.2005.08.009.","journal-title":"Int J Med Inf"},{"key":"521_CR30","volume-title":"The importance and value of protecting the privayc of health information: Roles of HIPAA Privacy Rule and the Common Rule in health research","author":"J Pritts","year":"2008","unstructured":"Pritts J: The importance and value of protecting the privayc of health information: Roles of HIPAA Privacy Rule and the Common Rule in health research. 2008, Available from: http:\/\/iom.edu\/Object.File\/Master\/53\/160\/Pritts%20Privacy%20Final%20Draft%20web.pdf. Accessed on: July 15, 2009."},{"issue":"409","key":"521_CR31","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1080\/01621459.1990.10475304","volume":"85","author":"J Bethlehem","year":"1990","unstructured":"Bethlehem J, Keller W, Pannekoek J: Disclosure control of microdata. J Am Stat Assoc. 1990, 85 (409): 38-45. 10.1080\/01621459.1990.10475304.","journal-title":"J Am Stat Assoc"},{"key":"521_CR32","volume-title":"Uniqueness of Simple Demographics in the US Population","author":"L Sweeney","year":"2000","unstructured":"Sweeney L: Uniqueness of Simple Demographics in the US Population. 2000, Carnegie Mellon University, Laboratory for International Data Privacy"},{"issue":"2","key":"521_CR33","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1197\/jamia.M2902","volume":"16","author":"K El Emam","year":"2009","unstructured":"El Emam K, Brown A, Abdelmalik P: Evaluating Predictors of Geographic Area Population Size Cutoffs to Manage Re-identification Risk. J Am Med Inform Assoc. 2009, 16 (2): 256-266. 10.1197\/jamia.M2902. [PMID: 19074299].","journal-title":"J Am Med Inform Assoc"},{"key":"521_CR34","doi-asserted-by":"publisher","DOI":"10.1145\/1179601.1179615","volume-title":"Revisiting the uniqueness of simple demographics in the US population","author":"P Golle","year":"2006","unstructured":"Golle P: Revisiting the uniqueness of simple demographics in the US population. 2006, Workshop on Privacy in the Electronic Society"},{"key":"521_CR35","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1186\/1472-6947-10-18","volume":"10","author":"K El Emam","year":"2010","unstructured":"El Emam K, Brown A, AbdelMalik P, Neisa A, Walker M, Bottomley J, Roffey T: A method for managing re-identification risk from small geographic areas in Canada. BMC Med Inform Decis Mak. 2010, 10: 18-10.1186\/1472-6947-10-18.","journal-title":"BMC Med Inform Decis Mak"},{"key":"521_CR36","volume-title":"A study on the re-identifiability of Dutch citizens. Workshop on Privacy Enhancing Technologies (PET 2010)","author":"M Koot","year":"2010","unstructured":"Koot M, Noordende G, de Laat C: A study on the re-identifiability of Dutch citizens. Workshop on Privacy Enhancing Technologies (PET 2010). 2010"},{"key":"521_CR37","volume-title":"Standards for privacy of individually identifiable health information","author":"Department of Health and Human Services","year":"2000","unstructured":"Department of Health and Human Services: Standards for privacy of individually identifiable health information. 2000, Federal Register, Available from: http:\/\/aspe.hhs.gov\/admnsimp\/final\/PvcFR06.txt. Archived at: http:\/\/www.webcitation.org\/5tqU5GyQX."},{"key":"521_CR38","volume-title":"Standards for privacy of individually identifiable health information","author":"Department of Health and Human Services","year":"2000","unstructured":"Department of Health and Human Services: Standards for privacy of individually identifiable health information. 2000, Federal Register, Available from: http:\/\/aspe.hhs.gov\/admnsimp\/final\/PvcFR05.txt. Archived at: http:\/\/www.webcitation.org\/5tqULb7hT."},{"issue":"2","key":"521_CR39","doi-asserted-by":"publisher","first-page":"169","DOI":"10.1136\/jamia.2009.000026","volume":"17","author":"K Benitez","year":"2010","unstructured":"Benitez K, Malin B: Evaluating re-identification risks with respect to the HIPAA privacy rule. J Am Med Inform Assoc. 2010, 17 (2): 169-177. 10.1136\/jamia.2009.000026.","journal-title":"J Am Med Inform Assoc"},{"key":"521_CR40","volume-title":"Canadian Community Health Survey (CCHS) Cycle 3.1 (2005) Public Use Microdata File (PUMF) User Guide","author":"Statistics Canada","year":"2006","unstructured":"Statistics Canada: Canadian Community Health Survey (CCHS) Cycle 3.1 (2005) Public Use Microdata File (PUMF) User Guide. 2006"},{"key":"521_CR41","volume-title":"Canadian Community Health Survey: Public Use Microdata File","author":"Statistics Canada","year":"2009","unstructured":"Statistics Canada: Canadian Community Health Survey: Public Use Microdata File. 2009, Available from: http:\/\/www.statcan.gc.ca\/bsolc\/olc-cel\/olc-cel?catno=82M0013X&lang=eng."},{"key":"521_CR42","volume-title":"2001 Census Public Use Microdata File: Individuals file user documentation","author":"Statistics Canada","year":"2001","unstructured":"Statistics Canada: 2001 Census Public Use Microdata File: Individuals file user documentation. 2001"},{"issue":"3","key":"521_CR43","doi-asserted-by":"publisher","first-page":"427","DOI":"10.1111\/1467-985X.00212","volume":"164","author":"A Dale","year":"2001","unstructured":"Dale A, Elliot M: Proposals for the 2001 samples of anonymized records: An assessment of disclosure risk. J R Stat Soc. 2001, 164 (3): 427-447. 10.1111\/1467-985X.00212.","journal-title":"J R Stat Soc"},{"issue":"2","key":"521_CR44","doi-asserted-by":"publisher","first-page":"305","DOI":"10.2307\/2983043","volume":"154","author":"C Marsh","year":"1991","unstructured":"Marsh C, Skinner C, Arber S, Penhale B, Openshaw S, Hobcraft J, Lievesley D, Walford N: The case for samples of anonymized records from the 1991 census. J R Stat Soc A Stat Soc. 1991, 154 (2): 305-340. 10.2307\/2983043.","journal-title":"J R Stat Soc A Stat Soc"},{"issue":"1","key":"521_CR45","doi-asserted-by":"publisher","first-page":"35","DOI":"10.2307\/1403544","volume":"62","author":"C Marsh","year":"1994","unstructured":"Marsh C, Dale A, Skinner C: Safe data versus safe settings: Access to microdata from the British census. Int Stat Rev. 1994, 62 (1): 35-53. 10.2307\/1403544.","journal-title":"Int Stat Rev"},{"key":"521_CR46","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1186\/1472-6947-11-53","volume":"11","author":"K El Emam","year":"2011","unstructured":"El Emam K, Paton D, Dankar F, Koru G: De-identifying a Public Use Microdata File from the Canadian National Discharge Abstract Database. BMC Med Inform Decis Mak. 2011, 11: 53-10.1186\/1472-6947-11-53.","journal-title":"BMC Med Inform Decis Mak"},{"key":"521_CR47","doi-asserted-by":"publisher","first-page":"627","DOI":"10.1197\/jamia.M2716","volume":"15","author":"K El Emam","year":"2008","unstructured":"El Emam K, Dankar F: Protecting privacy using k-anonymity. J Am Med Inform Assoc. 2008, 15: 627-637. 10.1197\/jamia.M2716.","journal-title":"J Am Med Inform Assoc"},{"issue":"3","key":"521_CR48","first-page":"329","volume":"2","author":"T Dalenius","year":"1986","unstructured":"Dalenius T: Finding a needle in a haystack or identifying anonymous census records. J Official Stat. 1986, 2 (3): 329-336.","journal-title":"J Official Stat"},{"issue":"4","key":"521_CR49","doi-asserted-by":"publisher","first-page":"e28","DOI":"10.2196\/jmir.8.4.e28","volume":"8","author":"K El Emam","year":"2006","unstructured":"El Emam K, Jabbouri S, Sams S, Drouet Y, Power M: Evaluating common de-identification heuristics for personal health information. J Med Internet Res. 2006, 8 (4): e28-10.2196\/jmir.8.4.e28. [PMID: 17213047].","journal-title":"J Med Internet Res"},{"key":"521_CR50","volume-title":"Pan-Canadian De-Identification Guidelines for Personal Health Information","author":"K El Emam","year":"2007","unstructured":"El Emam K, Jonker E, Sams S, Neri E, Neisa A, Gao T, Chowdhury S: Pan-Canadian De-Identification Guidelines for Personal Health Information. 2007, Ottawa: Privacy Commissioner of Canada"},{"key":"521_CR51","volume-title":"CIHR best practices for protecting privacy in health research","author":"Canadian Institutes of Health Research","year":"2005","unstructured":"Canadian Institutes of Health Research: CIHR best practices for protecting privacy in health research. 2005, Ottawa: Canadian Institutes of Health Research"},{"key":"521_CR52","volume-title":"Health Informatics: Pseudonymization","author":"ISO\/TS 25237","year":"2008","unstructured":"ISO\/TS 25237: Health Informatics: Pseudonymization. 2008, Geneva: International Organization for Standardization"},{"issue":"1","key":"521_CR53","first-page":"2","volume":"25","author":"J Yakowitz","year":"2011","unstructured":"Yakowitz J: Tragedy of the Commons. Harvard J Law Technol. 2011, 25 (1): 2-66.","journal-title":"Harvard J Law Technol"},{"issue":"Part 4","key":"521_CR54","doi-asserted-by":"publisher","first-page":"855","DOI":"10.1111\/1467-9868.00365","volume":"64","author":"G Skinner","year":"2002","unstructured":"Skinner G, Elliot M: A measure of disclosure risk for microdata. J R Stat Soc Ser B. 2002, 64 (Part 4): 855-867.","journal-title":"J R Stat Soc Ser B"},{"key":"521_CR55","volume-title":"Report to the Secretary of the US Department of Health and Human Services on Enhanced Protections for Uses of Health Data: A Stewardship Framework for \"Secondary Uses\" of Electronically Collected and Transmitted Health Data","author":"National Committee on Vital and Health Statistics","year":"2007","unstructured":"National Committee on Vital and Health Statistics: Report to the Secretary of the US Department of Health and Human Services on Enhanced Protections for Uses of Health Data: A Stewardship Framework for \"Secondary Uses\" of Electronically Collected and Transmitted Health Data. 2007"},{"key":"521_CR56","volume-title":"Data sharing under HIPAA: 12 years later. Workshop on the HIPAA Privacy Rule's De-Identification Standard","author":"L Sweeney","year":"2010","unstructured":"Sweeney L: Data sharing under HIPAA: 12 years later. Workshop on the HIPAA Privacy Rule's De-Identification Standard. 2010, Washington: Department of Health and Human Services"},{"key":"521_CR57","volume-title":"The Safe Harbor method of de-identification: An empirical test. Fourth National HIPAA Summit West","author":"D Lafky","year":"2010","unstructured":"Lafky D: The Safe Harbor method of de-identification: An empirical test. Fourth National HIPAA Summit West. 2010"},{"key":"521_CR58","volume-title":"Proceedings of the International Seminar on Statistical Confidentiality","author":"C Skinner","year":"1993","unstructured":"Skinner C, Holmes D: Modeling population uniqueness. Proceedings of the International Seminar on Statistical Confidentiality. 1993"},{"key":"521_CR59","doi-asserted-by":"publisher","DOI":"10.1002\/0471715816","volume-title":"Univariate discrete distributions","author":"N Johnson","year":"2005","unstructured":"Johnson N, Kotz S, Kemp A: Univariate discrete distributions. 2005, Hoboken: Wiley"},{"key":"521_CR60","volume-title":"Proceedings of the Conference on Statistical Data Protection","author":"A Takemara","year":"1999","unstructured":"Takemara A: Some superpopulation models for estimating the number of population uniques. Proceedings of the Conference on Statistical Data Protection. 1999"},{"key":"521_CR61","doi-asserted-by":"publisher","first-page":"177","DOI":"10.1007\/978-94-009-0513-9_4","volume-title":"Mathematical and statistical development of evolutionary theory","author":"W Ewens","year":"1990","unstructured":"Ewens W: Population genetics theory - the past and the future. Mathematical and statistical development of evolutionary theory. Edited by: Lessard Kluwer S. 1990, Springer: New York, 177-227."},{"key":"521_CR62","doi-asserted-by":"publisher","first-page":"525","DOI":"10.2307\/1428070","volume":"28","author":"J Pitman","year":"1996","unstructured":"Pitman J: Random discrete distribution invariant under size based permutation. Adv Appl Probability. 1996, 28: 525-539. 10.2307\/1428070.","journal-title":"Adv Appl Probability"},{"issue":"4","key":"521_CR63","first-page":"499","volume":"17","author":"N Hoshino","year":"2001","unstructured":"Hoshino N: Applying Pitman's sampling formula to microdata disclosure risk assessment. J Official Stat. 2001, 17 (4): 499-520.","journal-title":"J Official Stat"},{"issue":"1","key":"521_CR64","first-page":"79","volume":"14","author":"G Chen","year":"1998","unstructured":"Chen G, Keller-McNulty S: Estimation of identification disclosure risk in microdata. J Official Stat. 1998, 14 (1): 79-95.","journal-title":"J Official Stat"},{"key":"521_CR65","volume-title":"Proceedings of New Techniques and Technologies for Statistics (vol. 1)","author":"R Benedetti","year":"1998","unstructured":"Benedetti R, Franconi L: Statistical and technological solutions for controlled data dissemination. Proceedings of New Techniques and Technologies for Statistics (vol. 1). 1998"},{"key":"521_CR66","volume-title":"Estimation of the percent of unique population elements on a microdata file using the sample","author":"L Zayatz","year":"1991","unstructured":"Zayatz L: Estimation of the percent of unique population elements on a microdata file using the sample. 1991, Washington: US Bureau of the Census"},{"issue":"4","key":"521_CR67","first-page":"307","volume":"62","author":"K El Emam","year":"2009","unstructured":"El Emam K, Dankar F, Vaillancourt R, Roffey T, Lysyk M: Evaluating patient re-identification risk from hospital prescription records. Can J Hospital Pharm. 2009, 62 (4): 307-319.","journal-title":"Can J Hospital Pharm"},{"issue":"5","key":"521_CR68","doi-asserted-by":"publisher","first-page":"597","DOI":"10.1093\/aje\/kwk049","volume":"165","author":"H Howe","year":"2007","unstructured":"Howe H, Lake A, Shen T: Method to assess identifiability in electronic data files. Am J Epidemiol. 2007, 165 (5): 597-601.","journal-title":"Am J Epidemiol"},{"key":"521_CR69","volume-title":"Unique record identification on public use files as tested on the 1994\u20131998 CINA analytic file","author":"H Howe","year":"2002","unstructured":"Howe H, Lake A, Lehnherr M, Roney D: Unique record identification on public use files as tested on the 1994\u20131998 CINA analytic file. 2002, North American Association of Central Cancer Registries"},{"issue":"4","key":"521_CR70","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1109\/MSP.2008.84","volume":"6","author":"K El Emam","year":"2008","unstructured":"El Emam K: Heuristics for de-identifying health data. IEEE Security and Privacy. 2008, 6 (4): 58-61.","journal-title":"IEEE Security and Privacy"},{"key":"521_CR71","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-031-01899-2","volume-title":"Ensemble methods in data mining","author":"G Seni","year":"2010","unstructured":"Seni G, Elder J: Ensemble methods in data mining. 2010, San Rafael: Morgan & Claypool"},{"key":"521_CR72","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84858-7","volume-title":"The Elements of Statistical Learning: Data Mining, Inference, and Prediction","author":"T Hastie","year":"2009","unstructured":"Hastie T, Tibshirani R, Friedman J: The Elements of Statistical Learning: Data Mining, Inference, and Prediction. 2009, New York: Springer"},{"key":"521_CR73","volume-title":"Classification and Regression Trees","author":"L Breiman","year":"1984","unstructured":"Breiman L, Friedman J, Olshen R, Stone C: Classification and Regression Trees. 1984, Belmont: Wadsworth and Brooks\/Cole"},{"key":"521_CR74","volume-title":"The state experience in health quality data collection","author":"Consumer-Purchaser Disclosure Project","year":"2004","unstructured":"Consumer-Purchaser Disclosure Project: The state experience in health quality data collection. 2004, Washington DC: National Partnership for Women & Families, Available from http:\/\/healthcaredisclosure.org\/links\/files\/DataCollection.pdf."},{"key":"521_CR75","doi-asserted-by":"publisher","first-page":"454","DOI":"10.1186\/1471-2458-11-454","volume":"11","author":"K El Emam","year":"2011","unstructured":"El Emam K, Mercer J, Moreau K, Grava-Gubins I, Buckeridge D, Jonker E: Physician privacy concerns when disclosing patient data to public health authorities for disease outbreak surveillance. BMC Public Health. 2011, 11: 454-10.1186\/1471-2458-11-454.","journal-title":"BMC Public Health"},{"key":"521_CR76","volume-title":"National Post","author":"S Bell","year":"2006","unstructured":"Bell S: Alleged LTTE front had voter lists. National Post. 2006"},{"key":"521_CR77","volume-title":"National Post","author":"S Bell","year":"2006","unstructured":"Bell S: Privacy chief probes how group got voter lists. National Post. 2006"},{"key":"521_CR78","volume-title":"Voters lists 'most disturbing' items seized in Tamil raids, documents say. Globe and Mail","author":"C Freeze","year":"2008","unstructured":"Freeze C, Clark C: Voters lists 'most disturbing' items seized in Tamil raids, documents say. Globe and Mail. 2008, Available from: http:\/\/www.theglobeandmail.com\/servlet\/story\/RTGAM.20080507.wxtamilssb07\/BNStory\/National\/home. Archived at: http:\/\/www.webcitation.org\/5Xe4UWJKP."},{"key":"521_CR79","volume-title":"Proceedings of he 5th International Workshop on Privacy and Anonymity in the Information Society (PAIS)","author":"F Dankar","year":"2012","unstructured":"Dankar F, El Emam K: The Application of Differential Privacy to Health Data. Proceedings of he 5th International Workshop on Privacy and Anonymity in the Information Society (PAIS). 2012"},{"key":"521_CR80","volume-title":"Office of Civil Rights. Breaches Affecting 500 or More Individuals","author":"Department of Health and Human Services","year":"2010","unstructured":"Department of Health and Human Services: Office of Civil Rights. Breaches Affecting 500 or More Individuals. 2010, Available from: http:\/\/www.hhs.gov\/ocr\/privacy\/hipaa\/administrative\/breachnotificationrule\/postedbreaches.html."},{"issue":"5","key":"521_CR81","doi-asserted-by":"publisher","first-page":"670","DOI":"10.1197\/jamia.M3144","volume":"16","author":"K El Emam","year":"2009","unstructured":"El Emam K, Dankar F, Issa R, Jonker E, Amyot D, Cogo E, Corriveau J-P, Walker M, Chowdhury S, Vaillancourt R, Roffey T, Bottomley J: A Globally Optimal k-Anonymity Method for the De-identification of Health Data. J Am Med Inf Assoc. 2009, 16 (5): 670-682. 10.1197\/jamia.M3144.","journal-title":"J Am Med Inf Assoc"},{"issue":"3","key":"521_CR82","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1109\/MSP.2010.103","volume":"8","author":"K El Emam","year":"2010","unstructured":"El Emam K: Risk-based de-identification of health data. IEEE Security and Privacy. 2010, 8 (3): 64-67.","journal-title":"IEEE Security and Privacy"},{"key":"521_CR83","volume-title":"Method and Experiences of Risk-Based De-identification of Health Information. Workshop on the HIPAA Privacy Rule's De-Identification Standard","author":"K El Emam","year":"2010","unstructured":"El Emam K: Method and Experiences of Risk-Based De-identification of Health Information. Workshop on the HIPAA Privacy Rule's De-Identification Standard. 2010, Department of Health and Human Services"},{"key":"521_CR84","volume-title":"A Positive-Sum Paradigm in Action in the Health Sector","author":"A Cavoukian","year":"2010","unstructured":"Cavoukian A, El Emam K: A Positive-Sum Paradigm in Action in the Health Sector. 2010, Office of the Information and Privacy Commissioner of Ontario"},{"key":"521_CR85","volume-title":"Calibrating Noise to Sensitivity in Private Data Analysis. 3rd theory of cryptography conference","author":"C Dwork","year":"2006","unstructured":"Dwork C, McSherry F, Nissim K, Smith A: Calibrating Noise to Sensitivity in Private Data Analysis. 3rd theory of cryptography conference. 2006"},{"key":"521_CR86","volume-title":"Proceedings of the 5th International Conference on Theory and Applications of Models of Computation","author":"C Dwork","year":"2008","unstructured":"Dwork C: Differential privacy: A survey of results. Proceedings of the 5th International Conference on Theory and Applications of Models of Computation. 2008"},{"key":"521_CR87","volume-title":"Differential Privacy. Automata, Languages and Programming","author":"C Dwork","year":"2006","unstructured":"Dwork C: Differential Privacy. Automata, Languages and Programming. 2006"},{"key":"521_CR88","volume-title":"The 5th International Workshop on Privacy and Anonymity in the Information Society (PAIS)","author":"F Dankar","year":"2012","unstructured":"Dankar F, El Emam K: The Application of Differential Privacy to Health Data. The 5th International Workshop on Privacy and Anonymity in the Information Society (PAIS). 2012"},{"key":"521_CR89","volume-title":"How Much Is Enough? Choosing epsilon for Differential Privacy","author":"J Lee","year":"2011","unstructured":"Lee J, Clifton C: How Much Is Enough? Choosing epsilon for Differential Privacy. 2011, Information Security"},{"key":"521_CR90","first-page":"210","volume-title":"Some Additional Insights on Applying Differential Privacy for Numeric Data","author":"R Sarathy","year":"2010","unstructured":"Sarathy R, Muralidhar K: Some Additional Insights on Applying Differential Privacy for Numeric Data. 2010, Privacy in Statistical Databases, 210-219."},{"key":"521_CR91","volume-title":"Protecting privacy when disclosing information: k-anonymity and its enforcement through generalisation and suppression","author":"P Samarati","year":"1998","unstructured":"Samarati P, Sweeney L: Protecting privacy when disclosing information: k-anonymity and its enforcement through generalisation and suppression. 1998, SRI International"},{"issue":"6","key":"521_CR92","doi-asserted-by":"publisher","first-page":"1010","DOI":"10.1109\/69.971193","volume":"13","author":"P Samarati","year":"2001","unstructured":"Samarati P: Protecting respondents' identities in microdata release. IEEE Transactions on Knowledge and Data Engineering. 2001, 13 (6): 1010-1027. 10.1109\/69.971193.","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"issue":"5","key":"521_CR93","doi-asserted-by":"publisher","first-page":"557","DOI":"10.1142\/S0218488502001648","volume":"10","author":"L Sweeney","year":"2002","unstructured":"Sweeney L: k-anonymity: a model for protecting privacy. International Journal on Uncertainty, Fuzziness and Knowledge-based Systems. 2002, 10 (5): 557-570. 10.1142\/S0218488502001648.","journal-title":"International Journal on Uncertainty, Fuzziness and Knowledge-based Systems"},{"key":"521_CR94","volume-title":"k-Anonymity, in Secure Data Management in Decentralized Systems","author":"V Ciriani","year":"2007","unstructured":"Ciriani V, di Vimercati SSF DC, Samarati P: k-Anonymity, in Secure Data Management in Decentralized Systems. 2007, New York: Springer"},{"issue":"444","key":"521_CR95","doi-asserted-by":"publisher","first-page":"1475","DOI":"10.1080\/01621459.1998.10473807","volume":"93","author":"P Haas","year":"1998","unstructured":"Haas P, Stokes L: Estimating the number of classes in a finite population. J Am Stat Assoc. 1998, 93 (444): 1475-1487. 10.1080\/01621459.1998.10473807.","journal-title":"J Am Stat Assoc"}],"container-title":["BMC Medical Informatics and Decision Making"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/1472-6947-12-66.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/1472-6947-12-66\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/1472-6947-12-66","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/1472-6947-12-66.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,24]],"date-time":"2023-06-24T01:14:59Z","timestamp":1687569299000},"score":1,"resource":{"primary":{"URL":"https:\/\/bmcmedinformdecismak.biomedcentral.com\/articles\/10.1186\/1472-6947-12-66"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,7,9]]},"references-count":95,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2012,12]]}},"alternative-id":["521"],"URL":"https:\/\/doi.org\/10.1186\/1472-6947-12-66","relation":{},"ISSN":["1472-6947"],"issn-type":[{"value":"1472-6947","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,7,9]]},"assertion":[{"value":"5 December 2011","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 June 2012","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"9 July 2012","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"66"}}