Confidentiality and confidence: is data aggregation a means to achieve both?

Abstract

The recent adoption of electronic technologies for use in management of personal health data have been accompanied by a commensurate level of concern about privacy. Public health authorities have been able to continue their full access to personal information, while restricting the information given to academic health researchers through the practice of aggregation. Through this band-aid strategy, there is a very real potential that critical pieces of information are missing for the purposes of research. While this might be a logical sacrifice in order to preserve individual privacy, quantitative analysis of the privacy gained through this method of aggregation shows that little, if any, benefit is achieved. If aggregation were the sole available means to reach the aims of both privacy and research, then further analysis of the practice of aggregation would be unnecessary. Yet suitable privacy protection techniques abound, enabling academic research to progress while adding true protection to individual health information.