This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Privacy Interests in Prescription Data, Part 2: Patient Privacy
March/April 2009 (vol. 7 no. 2)
pp. 75-78
ASCII Text
x 
 
Khaled El Emam, Patricia Kosseim, "Privacy Interests in Prescription Data, Part 2: Patient Privacy," IEEE Security & Privacy, vol. 7, no. 2, pp. 75-78, March/April, 2009.
 
 
BibTex
x
 
@article{ 10.1109/MSP.2009.47,
author = {Khaled El Emam and Patricia Kosseim},
title = {Privacy Interests in Prescription Data, Part 2: Patient Privacy},
journal ={IEEE Security & Privacy},
volume = {7},
number = {2},
issn = {1521-9615},
year = {2009},
pages = {75-78},
doi = {http://doi.ieeecomputersociety.org/10.1109/MSP.2009.47},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
}
 
 
RefWorks Procite/RefMan/Endnote
x 
 
TY - MGZN
JO - IEEE Security & Privacy
TI - Privacy Interests in Prescription Data, Part 2: Patient Privacy
IS - 2
SN - 1521-9615
SP75
EP78
EPD - 75-78
A1 - Khaled El Emam,
A1 - Patricia Kosseim,
PY - 2009
KW - privacy law
KW - healthcare
KW - re-identifiability
KW - privacy interests
VL - 7
JA - IEEE Security & Privacy
ER -
 
Khaled El Emam, Children's Hospital of Eastern Ontario Research Institute
Patricia Kosseim, Genome Canada
Prescription data disclosed by pharmacies without patient consent, could constitute a breach of privacy if individual patients can be re-identified by third parties. This article analyzes the concept of identifiability under Canadian and US privacy laws, including applicable thresholds of risk and the perspective from which the risk must be examined. The article goes on to examine concrete examples of how the risk of re-identifiability of prescription data can materialize in practice.

1. P. Kosseim, A. Kardash, and A. Penta eds., Compendium of Canadian Legislation Respecting the Protection of Personal Information in Health Research,, 2nd ed., Public Works and Government Services Canada, 2005; www.cihr-irsc.gc.ca/e/documentsethics_privacy_compendium_june2005_e.pdf .
2. Gordon v. Canada (Health), Federal Trial Reports, vol. 324, 2008, p. 94; www.canlii.org/en/ca/fct/doc/2008/2008fc258 2008fc258.html.
3. "Report to the Secretary of the US Department of Health and Human Services on Enhanced Protections for Uses of Health Data: A Stewardship Framework for 'Secondary Uses' of Electronically Collected and Transmitted Health Data," Nat'l Committee on Vital and Health Statistics, 2007; www.ncvhs.hhs.gov071221lt.pdf.
4. S. Clause et al., "Conforming to HIPAA Regulations and Compilation of Research Data," Am. J. Health-System Pharmacy, vol. 61, no. 10, 2004. pp. 1025–1031.
5. "Statisticians and De-Identifying Protected Health Information for HIPAA," Am. Public Health Assoc. newsletter, 2005; www.apha.org/membergroups/newsletters/sectionnewsletters/ statis/fall052121.htm.
6. Southern Illinoisan vs. The Illinois Department of Public Health, Supreme Court of the State of Illinois, docket no. 98712, 2006; www.state.il.us/court/Opinions/SupremeCourt/ 2006/February/Opinions/Html98712.htm .
7. K. El Emam, A. Brown, and P. Abdelmalik, "Evaluating Predictors of Geographic Area Population Size Cutoffs to Manage Re-identification Risk," J. Am. Medical Informatics Association, vol. 16, no. 2, 2009, pp. 256–266.
8. K. El Emam et al., "Evaluating Patient Re-Identification Risk from Hospital Prescription Records," to be published in Canadian J. Hospital Pharmacy, June 2009.

Index Terms:
privacy law, healthcare, re-identifiability, privacy interests
Citation:
Khaled El Emam, Patricia Kosseim, "Privacy Interests in Prescription Data, Part 2: Patient Privacy," IEEE Security & Privacy, vol. 7, no. 2, pp. 75-78, March-April 2009, doi:10.1109/MSP.2009.47
Usage of this product signifies your acceptance of the Terms of Use.