{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,12]],"date-time":"2026-09-12T16:55:35Z","timestamp":1789232135696,"version":"build-2803163510"},"reference-count":73,"publisher":"Frontiers Media SA","license":[{"start":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T00:00:00Z","timestamp":1770595200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["frontiersin.org"],"crossmark-restriction":true},"short-container-title":["Front. Digit. Health"],"abstract":"<jats:sec>\n                    <jats:title>Introduction<\/jats:title>\n                    <jats:p>Rare disease research relies heavily on secondary use of health data due to the scarcity of clinical guidelines and data sharing between research institutions and hospitals. Linking rare disease patients is challenging due to increased re-identification risk in small cohorts, thus limiting the data's potential for research. Privacy-Preserving Record Linkage (PPRL) enables the linkage of disparate datasets while safeguarding the identities of involved participants.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Methods<\/jats:title>\n                    <jats:p>The aim of the present paper is to provide an up-to-date description of the concept and the technical details of the European Patient Identity (EUPID) Services, a configurable PPRL solution which is currently used for rare disease research in Europe to bridge healthcare and research. They support different algorithms for record linkage (configurable selection of quasi-identifiers, various hashing algorithms, phonetic hashing, Bloom filters), re-identification and flexible specification of the pseudonym format. Furthermore, their setup is also flexible whether to install standalone instances or integrate with a central EUPID Services deployment.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Results<\/jats:title>\n                    <jats:p>The EUPID Services have been used in various research applications since 2014. As of July 2025, 6,356 unique patients have been registered to the central EUPID Services within the domain Paediatric Oncology in Europe, and 10,340 pseudonyms for 12 EUPID Contexts have been generated. Within the Austrian Health Data Donation Space, which represents a federated PPRL infrastructure supporting asynchronous record linkage, more than 16 million patients were pseudonymised in six different contexts. Overall, four cases of false negative matches have been identified, which were caused by typing errors. So far, no false positive match has ever been detected.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Discussion<\/jats:title>\n                    <jats:p>In view of the upcoming European legislatives like the European Health Data Space (EHDS), connecting patient data securely and safely will become increasingly important and useful. The EUPID Services support such linkage in a Findable, Accessible, Interoperable and Reusable (FAIR) manner and thus could represent a vital and proven part of future national and European research networks.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.3389\/fdgth.2026.1751234","type":"journal-article","created":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T13:22:11Z","timestamp":1770643331000},"update-policy":"https:\/\/doi.org\/10.3389\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["EUPID\u2014configurable privacy-preserving record linkage in federated health data spaces"],"prefix":"10.3389","volume":"8","author":[{"given":"Dieter","family":"Hayn","sequence":"first","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]},{"name":"Department for Computer Science and Biomedical Engineering, Institute of Neural Engineering, Technical University Graz","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emanuel","family":"Sandner","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Martin","family":"Baumgartner","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bernhard","family":"Jammerbund","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabian","family":"Wiesm\u00fcller","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]},{"name":"Department for Computer Science and Biomedical Engineering, Institute of Neural Engineering, Technical University Graz","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"Beyer","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]},{"name":"Department for Computer Science and Biomedical Engineering, Institute of Neural Engineering, Technical University Graz","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hannah","family":"Vinatzer","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]},{"name":"Department for Computer Science and Biomedical Engineering, Institute of Neural Engineering, Technical University Graz","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Angelika","family":"Rzepka","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Klaus","family":"Donsa","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Karl","family":"Kreiner","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guenter","family":"Schreier","sequence":"additional","affiliation":[{"name":"Digital Health Information Systems, Center for Health and Bioresources, AIT Austrian Institute of Technology","place":["Graz, Austria"]},{"name":"Department for Computer Science and Biomedical Engineering, Institute of Neural Engineering, Technical University Graz","place":["Graz, Austria"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1965","published-online":{"date-parts":[[2026,2,9]]},"reference":[{"key":"B1","doi-asserted-by":"publisher","first-page":"3456","DOI":"10.1200\/JCO.22.00033","article-title":"The critical role of academic clinical trials in pediatric cancer drug approvals: design, conduct, and fit for purpose data for positive regulatory decisions","volume":"40","author":"De Wilde","year":"2022","journal-title":"J Clin Oncol"},{"key":"B2","year":"2016"},{"key":"B3","year":"2022"},{"key":"B4","doi-asserted-by":"publisher","first-page":"160018","DOI":"10.1038\/sdata.2016.18","article-title":"The FAIR guiding principles for scientific data management and stewardship","volume":"3","author":"Wilkinson","year":"2016","journal-title":"Sci Data"},{"key":"B5","doi-asserted-by":"publisher","first-page":"2696","DOI":"10.3390\/cancers16152696","article-title":"Use cases requiring privacy-preserving record linkage in paediatric oncology","volume":"16","author":"Hayn","year":"2024","journal-title":"Cancers (Basel)"},{"key":"B6","doi-asserted-by":"publisher","first-page":"974","DOI":"10.1016\/S1470-2045(22)00287-X","article-title":"The impact of the EU general data protection regulation on childhood cancer research in Europe","volume":"23","author":"Vassal","year":"2022","journal-title":"Lancet Oncol"},{"key":"B7","doi-asserted-by":"publisher","first-page":"946","DOI":"10.1016\/j.is.2012.11.005","article-title":"A taxonomy of privacy-preserving record linkage techniques","volume":"38","author":"Vatsalan","year":"2013","journal-title":"Inf Syst"},{"key":"B8","doi-asserted-by":"publisher","first-page":"4966","DOI":"10.1109\/TIFS.2021.3114026","article-title":"Modern privacy-preserving record linkage techniques: an overview","volume":"16","author":"Gkoulalas-Divanis","year":"2021","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"B9","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-030-59706-1","volume-title":"Linking Sensitive Data","author":"Christen","year":"2020"},{"key":"B10","doi-asserted-by":"publisher","first-page":"223","DOI":"10.5626\/JCSE.2011.5.3.223","article-title":"Secure blocking+secure matching=secure record linkage","volume":"5","author":"Karakasidis","year":"2011","journal-title":"J Comput Sci Eng"},{"key":"B11","first-page":"244","article-title":"An analysis of blocking methods for private record linkage","author":"Etienne","year":"2016"},{"key":"B12","first-page":"644","article-title":"A one way public key cryptosystem for the linkage of nominal files in epidemiological studies","volume":"8","author":"Dusserre","year":"1995","journal-title":"Medinfo"},{"key":"B13","doi-asserted-by":"publisher","first-page":"117","DOI":"10.1016\/S1386-5056(98)00019-7","article-title":"How to ensure data security of an epidemiological follow-up: quality assessment of an anonymous record linkage procedure","volume":"49","author":"Quantin","year":"1998","journal-title":"Int J Med Inform"},{"key":"B14","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1007\/978-3-642-00179-6_5","article-title":"Privacy-Preserving fuzzy matching using a public reference table","volume-title":"Intelligent Patient Management","author":"Pang","year":"2009"},{"key":"B15","volume-title":"Scalable and Approximate Privacy-preserving record Linkage","author":"Vatsalan","year":"2014"},{"key":"B16","author":"Scannapieco","year":""},{"key":"B17","first-page":"1283","article-title":"Efficient private record linkage","author":"Yakout","year":"2009"},{"key":"B18","first-page":"1597","article-title":"Frequent grams based embedding for privacy preserving record linkage","author":"Bonomi","year":"2012"},{"key":"B19","first-page":"1389","article-title":"Composing differential privacy and secure computation: a case study on scaling private record linkage","author":"He","year":"2017"},{"key":"B20","first-page":"496","article-title":"A hybrid approach to private record linkage","author":"Inan","year":"2008"},{"key":"B21","first-page":"167","article-title":"Efficient privacy-aware record integration","author":"Kuzu","year":"2013"},{"key":"B22","doi-asserted-by":"publisher","first-page":"1657","DOI":"10.1093\/bioinformatics\/btaa764","article-title":"Mainzelliste SecureEpiLinker (MainSEL): privacy-preserving record linkage using secure multi-party computation","volume":"38","author":"Stammler","year":"2022","journal-title":"Bioinformatics"},{"key":"B23","doi-asserted-by":"publisher","first-page":"458","DOI":"10.1186\/s12967-022-03671-6","article-title":"Record linkage based patient intersection cardinality for rare disease studies using mainzelliste and secure multi-party computation","volume":"20","author":"Kussel","year":"2022","journal-title":"J Transl Med"},{"key":"B24","volume-title":"Security in Computing","author":"Pfleeger","year":"2015"},{"key":"B25","volume-title":"Anonlink Private Record Linkage System","year":"2017"},{"key":"B26","doi-asserted-by":"publisher","first-page":"100973","DOI":"10.1016\/j.imu.2022.100973","article-title":"CRID\u2014a unique, universal, patient-generated identifier to facilitate collaborative rare disease clinical research","volume":"31","author":"Nesbitt","year":"2022","journal-title":"Inform Med Unlocked"},{"key":"B27","doi-asserted-by":"publisher","DOI":"10.21203\/rs.3.rs-1053445\/v1","article-title":"Federated trusted third party as an approach for privacy preserving record linkage in a large network of university medicines in pandemic research","author":"Hampf","year":"2021","journal-title":"Res Sq."},{"key":"B28","doi-asserted-by":"crossref","DOI":"10.1109\/ISC2.2018.8656943","article-title":"FEMRL: a framework for large-scale privacy-preserving linkage of Patients\u2019 electronic health records","author":"Karapiperis","year":""},{"key":"B29","first-page":"440","article-title":"FRIL: a tool for comparative record linkage","volume":"2008","author":"Jurczyk","year":"2008","journal-title":"AMIA Annu Symp Proc"},{"key":"B30","first-page":"24","article-title":"Biogrid Australia and GRHANITE\u2122: privacy-protecting subject matching","volume":"168","author":"Boyle","year":"2011","journal-title":"Stud Health Technol Inform"},{"key":"B31","doi-asserted-by":"publisher","DOI":"10.23889\/ijpds.v3i4.650","article-title":"Linkwise: a modern record linkage software application","volume":"3","author":"Izakian","year":"2018","journal-title":"Int J Popul Data Sci"},{"key":"B32","doi-asserted-by":"publisher","first-page":"1139","DOI":"10.23889\/ijpds.v4i2.1139","article-title":"Population data centre profiles: centre for data linkage","volume":"4","author":"Boyd","year":"2020","journal-title":"Int J Popul Data Sci"},{"key":"B33","first-page":"1","article-title":"LSHDB: a parallel and distributed engine for record linkage and similarity search","author":"Karapiperis","year":"2016"},{"key":"B34","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1186\/s12911-014-0123-5","article-title":"A RESTful interface to pseudonymization services in modern web applications","volume":"15","author":"Lablans","year":"2015","journal-title":"BMC Med Inform Decis Mak"},{"key":"B35","first-page":"1795","article-title":"Scalable privacy-preserving record linkage for multiple databases","author":"Vatsalan","year":"2014"},{"key":"B36","first-page":"125","article-title":"A toolbox for record linkage","volume":"33","author":"Schnell","year":"2004","journal-title":"Austrian J Stat"},{"key":"B37","doi-asserted-by":"publisher","first-page":"257","DOI":"10.23889\/ijpds.v1i1.277","article-title":"Preserving privacy in the face of clients with different data needs using the NGLMS","volume":"1","author":"Radbone","year":"2017","journal-title":"Int J Popul Data Sci"},{"key":"B38","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1016\/j.cct.2015.03.003","article-title":"NIH\/NCATS\/GRDR\u00ae common data elements: a leading force for standardized data collection","volume":"42","author":"Rubinstein","year":"2015","journal-title":"Contemp Clin Trials"},{"key":"B39","doi-asserted-by":"publisher","first-page":"562","DOI":"10.1093\/jamiaopen\/ooz050","article-title":"Implementing a hash-based privacy-preserving record linkage tool in the OneFlorida clinical research network","volume":"2","author":"Bian","year":"2019","journal-title":"JAMIA Open"},{"key":"B40","author":"Ghai","year":"2022"},{"key":"B41","article-title":"PRIVATEER: a private record linkage toolkit","author":"Karakasidis","year":"2015"},{"key":"B42","first-page":"1105","article-title":"SOEMPI: a secure open enterprise master patient Index software toolkit for private record linkage","volume":"2014","author":"Toth","year":"2014","journal-title":"AMIA Annu Symp Proc"},{"key":"B43","first-page":"17","article-title":"TAILOR: a record linkage toolbox","author":"Elfeky","year":""},{"key":"B44","doi-asserted-by":"publisher","first-page":"211","DOI":"10.3233\/978-1-61499-397-1-211","article-title":"Patient identity management for secondary use of biomedical research data in a distributed computing environment","volume":"198","author":"Nitzlnader","year":"2014","journal-title":"Stud Health Technol Inform"},{"key":"B45","author":"Rivest","year":"1992"},{"key":"B46","first-page":"1","article-title":"Keying hash functions for message authentication","author":"Bellare","year":"1996"},{"key":"B47","doi-asserted-by":"crossref","DOI":"10.1109\/EuroSP.2016.31","article-title":"Argon2: new generation of memory-hard functions for password hashing and other applications","author":"Biryukov","year":"2016"},{"key":"B48","first-page":"925","article-title":"Die K\u00f6lner Phonetik. Ein Verfahren zur Identifizierung von Personennamen auf der Grundlage der Gestaltanalyse","volume":"19","author":"Postel","year":"1969","journal-title":"IBM-Nachrichten"},{"key":"B49","volume-title":"The Art of Computer Programming","author":"Knuth","year":"1973"},{"key":"B50","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1186\/1472-6947-9-41","article-title":"Privacy-preserving record linkage using Bloom filters","volume":"9","author":"Schnell","year":"2009","journal-title":"BMC Med Inform Decis Mak"},{"key":"B51","author":"Schnell","year":"2011"},{"key":"B52","doi-asserted-by":"publisher","first-page":"23","DOI":"10.3233\/SHTI200070","article-title":"Encoding of numerical data for privacy-preserving record linkage","volume":"271","author":"Demelius","year":"2020","journal-title":"Stud Health Technol Inform"},{"key":"B53","first-page":"604","article-title":"Approximate nearest neighbors: towards removing the curse of dimensionality","author":"Indyk","year":""},{"key":"B54","doi-asserted-by":"publisher","first-page":"1442","DOI":"10.3233\/SHTI240683","article-title":"Privacy-Preserving linkage of distributed pseudonymised datasets in a virtual European rare disease platform","volume":"316","author":"Hayn","year":"2024","journal-title":"Stud Health Technol Inform"},{"key":"B55","doi-asserted-by":"publisher","first-page":"31","DOI":"10.3233\/978-1-61499-645-3-31","article-title":"Piloting the European unified patient identity management (EUPID) concept to facilitate secondary use of neuroblastoma data from clinical trials and biobanking","volume":"223","author":"Ebner","year":"2016","journal-title":"Stud Health Technol Inform"},{"key":"B56","doi-asserted-by":"publisher","first-page":"773","DOI":"10.3233\/SHTI250462","article-title":"MONALISA: a privacy-preserving infrastructure supporting liquid biopsies to monitor relapsed neuroblastoma","volume":"327","author":"Hayn","year":"2025","journal-title":"Stud Health Technol Inform"},{"key":"B57","article-title":"Privacy-Preserving record linkage between the SIOPEN BIOPORTAL and the RD-connect genome phenome analysis platform via the EUPID services","author":"Hayn","year":"2024"},{"key":"B58","first-page":"287","article-title":"IT Infrastructure for merging data from different clinical trials and across independent research networks","volume":"228","author":"Hayn","year":"2016","journal-title":"Stud Health Technol Inform"},{"key":"B59","doi-asserted-by":"publisher","first-page":"562","DOI":"10.1007\/s00247-023-05770-y","article-title":"Imaging biomarkers and radiomics in pediatric oncology: a view from the PRIMAGE (PRedictive in silico multiscale analytics to support cancer personalized diaGnosis and prognosis, empowered by imaging biomarkers) project","volume":"54","author":"Veiga-Canuto","year":"2024","journal-title":"Pediatr Radiol"},{"key":"B60","doi-asserted-by":"publisher","first-page":"1622","DOI":"10.3390\/cancers15051622","article-title":"Independent validation of a deep learning nnU-net tool for neuroblastoma detection and segmentation in MR images","volume":"15","author":"Veiga-Canuto","year":"2023","journal-title":"Cancers (Basel)"},{"key":"B61","doi-asserted-by":"publisher","first-page":"2696","DOI":"10.3390\/cancers16152696","article-title":"Use cases requiring privacy-preserving record linkage in paediatric Oncology","volume":"16","author":"Hayn","year":"2024","journal-title":"Cancers (Basel)"},{"key":"B62","doi-asserted-by":"publisher","first-page":"83","DOI":"10.3233\/SHTI240351","article-title":"Smart FOX\u2014enabling citizen-based donation of EHR-standardised data for clinical research in Austria","volume":"316","author":"Donsa","year":"2024","journal-title":"Stud Health Technol Inform"},{"key":"B63","doi-asserted-by":"publisher","first-page":"1301660","DOI":"10.3389\/fmed.2024.1301660","article-title":"Health data space nodes for privacy-preserving linkage of medical data to support collaborative secondary analyses","volume":"11","author":"Baumgartner","year":"2024","journal-title":"Front Med (Lausanne)"},{"key":"B64","doi-asserted-by":"publisher","first-page":"104727","DOI":"10.1016\/j.ejmg.2023.104727","article-title":"European Standard clinical practice\u2014key issues for the medical care of individuals with familial leukemia","volume":"66","author":"F\u00f6rster","year":"2023","journal-title":"Eur J Med Genet"},{"key":"B65","doi-asserted-by":"publisher","first-page":"ooaf002","DOI":"10.1093\/jamiaopen\/ooaf002","article-title":"Accuracy of privacy preserving record linkage for real world data in the United States: a systematic review","volume":"8","author":"Tyagi","year":"2025","journal-title":"JAMIA Open"},{"key":"B66","first-page":"38","article-title":"The double metaphone search algorithm","volume":"18","author":"Philips","year":"2000","journal-title":"C\/C++ Users J"},{"key":"B67","doi-asserted-by":"publisher","first-page":"464","DOI":"10.1038\/s41597-024-03280-6","article-title":"Getting your DUCs in a row\u2014standardising the representation of digital use conditions","volume":"11","author":"Jeanson","year":"2024","journal-title":"Sci Data"},{"key":"B68","doi-asserted-by":"publisher","first-page":"465","DOI":"10.1038\/s41597-024-03279-z","article-title":"Common conditions of use elements. Atomic concepts for consistent and effective information governance","volume":"11","author":"Sanchez Gonzalez","year":"2024","journal-title":"Sci Data"},{"key":"B69","article-title":"Use of QR codes in a Mobile app to support privacy-preserving record linkage via the EUPID services","author":"Fabian Wiesmueller","year":"2022"},{"key":"B70","year":"2025"},{"key":"B71","doi-asserted-by":"publisher","first-page":"2337","DOI":"10.3390\/math12152337","article-title":"Enhanced multi-party privacy-preserving record linkage using trusted execution environments","volume":"12","author":"Han","year":"2024","journal-title":"Mathematics"},{"key":"B72","doi-asserted-by":"publisher","first-page":"1800","DOI":"10.3390\/math12121800","article-title":"A multi-party privacy-preserving record linkage method based on secondary encoding","volume":"12","author":"Han","year":"2024","journal-title":"Mathematics"},{"key":"B73","doi-asserted-by":"publisher","first-page":"1854","DOI":"10.3390\/math12121854","article-title":"A parallel multi-party privacy-preserving record linkage method based on a consortium blockchain","volume":"12","author":"Han","year":"2024","journal-title":"Mathematics"}],"container-title":["Frontiers in Digital Health"],"original-title":[],"link":[{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdgth.2026.1751234\/full","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T13:22:13Z","timestamp":1770643333000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdgth.2026.1751234\/full"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,9]]},"references-count":73,"alternative-id":["10.3389\/fdgth.2026.1751234"],"URL":"https:\/\/doi.org\/10.3389\/fdgth.2026.1751234","relation":{},"ISSN":["2673-253X"],"issn-type":[{"value":"2673-253X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2,9]]},"article-number":"1751234"}}