Boffins reveal how to extract identities from medical data

The identities of three MPs and a footballer were cracked by a team of academics.

Medical data privacy breached

University of Melbourne researchers have revealed how they were able to easily identify people from unencrypted, confidential medical data released by the Federal Government last year.

Examining records of medical treatment, procedures and dispensed drugs, the academics reported they identified three politicians and a prominent footballer.

“Many … health-related characteristics could be enough to identify a person,” the researchers said.

“We conducted a brief study of professional footballers, noting their injuries and surgeries over the years from online information and translating them into database queries. “For one AFL team captain, a unique record matches the publicly available information about his medical history, year of birth, and interstate movements. Sometimes a news story gives very precise dates for someone’s surgery or hospital admission.’’

The report was published by Dr Chris Culnane, Dr Benjamin Rubinstein and Dr Vanessa Teague from the university’s School of Computing and Information Systems.

The researchers used Medicare and Pharmaceutical Benefits Scheme data made publicly available by the Health Department in August 2016. The information was taken down the following month after the same researchers told the department it could be used to identify people.

The data set included de-identified medical billing records of 2.9 million Australians, from 1984 to 2014.

The research team said they had demonstrated “that a private health insurer (for example), could efficiently track the medical records of past customers through the decades of data, or derive extra information they didn’t know about from current customers. This would be a clear breach of privacy that would possibly never be reported, even though the data could lead to detrimental decisions for the individual in the future”.

Secure de-identification of rich data is probably not possible without “substantially degrading the data”, the report explained.

“The Australian Government holds vast quantities of information about individual Australians. It is not really ‘government data’. It is data about people, entrusted to the Government’s care.

“Data about government should be published openly and freely – not so for sensitive data about people. That should be published only when a clear, public explanation of the encryption and anonymisation methods has received enough peer review and public scrutiny to convince everyone that personal information will remain private.

“For some datasets, including (medical) unit-record level data, this is probably not possible,” the report concluded.



    To make a comment, please register or login
    19th Dec 2017
    Only yesterday my Doctor asked if I would agree with him putting my medical records on the internet for hospitals to get my medical information fast if needed. I agreed; have I made a mistake?
    19th Dec 2017
    No mate - don't ;let these stupid scaremongering articles dissuade you.

    You did the right thing .

    19th Dec 2017
    The article suggests that anyone has access to online medical records but that is not the fact, the researchers had approval to access the medical records. Anything placed on the internet is at risk of hackers so the only way to keep our records safe is to keep them with the family doctor. Many people, through circumstances or choice, move from city to city and, sometimes, with little notice. They have no idea who will be their medical assistance so cannot let their doctor know who to send their medical records. The online system will work well with a little bit of thought being put into the security of the details.
    20th Jan 2018
    Best Premium butter by Cariboulakes
    Our Premium Butter is blended to our specifications to better the best European butters. It is made with pure fresh cream and has a velvety texture. The secret to wonderful butter lies in our pure fresh.

    Join YOURLifeChoices, it’s free

    • Receive our daily enewsletter
    • Enter competitions
    • Comment on articles