Hospital Prescription Records
Online Pharmacy provides the access to health information and prescription medications.
A recent study led by Dr. Khaled El Emam, the Canada Research Chair in Electronic Health Information at the CHEO Research Institute, found that the information in hospital prescription records can quite easily re-identify patients.
Information on drug prescriptions are a highly sought after commodity. Pharmaceutical companies like to access this data to fine tune their marketing and sales efforts. Many retail pharmacies in Canada sell their prescription records to commercial data aggregators who perform analyses for pharmaceutical companies; the potential privacy risk with such a practice is if the patients can be re-identified from this data. There is now more demand for this data from hospital pharmacies as well.
Dr. El Emam's study demonstrates the importance of ensuring the proper de-identification of patient records. The study demonstrates a methodology for deciding which data to keep and which to de-identify, since hospital prescription data contains details such as where patients live and when they were admitted to the hospital.
"A meaningful risk analysis requires an understanding of the nature of plausible re-identification scenarios" explained Dr. El Emam "and is typically performed with a hospital's privacy officer to ensure that the risk to patient re-identification remains as low as possible." The risk analysis performed in this study provided a way to anonymize the hospital prescription data to maintain the privacy of the patients, by generalizing and removing some variables such as postal codes, admission and discharge dates, or gender, before they are shared with outside companies.