Journal of Digital Imaging

, Volume 25, Issue 1, pp 14–24 | Cite as

Image Data Sharing for Biomedical Research—Meeting HIPAA Requirements for De-identification

  • John B. Freymann
  • Justin S. Kirby
  • John H. Perry
  • David A. Clunie
  • C. Carl Jaffe
Article

Abstract

Data sharing is increasingly recognized as critical to cross-disciplinary research and to assuring scientific validity. Despite National Institutes of Health and National Science Foundation policies encouraging data sharing by grantees, little data sharing of clinical data has in fact occurred. A principal reason often given is the potential of inadvertent violation of the Health Insurance Portability and Accountability Act privacy regulations. While regulations specify the components of private health information that should be protected, there are no commonly accepted methods to de-identify clinical data objects such as images. This leads institutions to take conservative risk-averse positions on data sharing. In imaging trials, where images are coded according to the Digital Imaging and Communications in Medicine (DICOM) standard, the complexity of the data objects and the flexibility of the DICOM standard have made it especially difficult to meet privacy protection objectives. The recent release of DICOM Supplement 142 on image de-identification has removed much of this impediment. This article describes the development of an open-source software suite that implements DICOM Supplement 142 as part of the National Biomedical Imaging Archive (NBIA). It also describes the lessons learned by the authors as NBIA has acquired more than 20 image collections encompassing over 30 million images.

Keywords

Data sharing De-identification Anonymization Cross-disciplinary research Open access Open source DICOM Supplement 142 Image archive HIPAA PHI Common rule 

References

  1. 1.
    National Institutes of Health. http://grants.nih.gov/grants/policy/data_sharing/. Accessed 28 February 2011
  2. 2.
    Ohm, Paul, Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization (August 13, 2009). University of Colorado Law Legal Studies Research Paper No. 09–12. Available at SSRN: http://ssrn.com/abstract=1450006. Accessed 28 February 2011
  3. 3.
    Nelson B: Empty archives. Nature 461–10:160–163, 2009CrossRefGoogle Scholar
  4. 4.
    Vickers AJ: Whose data set is it anyway? Sharing raw data from randomized trials, Trials 2006. BioMed Central 7:15, 2006Google Scholar
  5. 5.
    Piwowar HA, Day RS, Fridsma DB: Sharing detailed research data is associated with increased citation rate. PLoS One. 2(3):e308, 2007PubMedCrossRefGoogle Scholar
  6. 6.
    National Institutes of Health. http://cancergenome.nih.gov/. Accessed 28 February 2011
  7. 7.
    National Institutes of Health. http://biospecimens.cancer.gov/archive/cahub/default.asp. Accessed 28 February 2011
  8. 8.
    Branstetter 4th, BF, Uttecht SD, Lionetti DM, Chang PJ: SimpleDICOM suite: personal productivity tools for managing DICOM objects. Radiographics. 27(5):1523–1530, 2007PubMedCrossRefGoogle Scholar
  9. 9.
    National Cancer Institute, Cancer Imaging Program. https://wiki.nci.nih.gov/display/CIP/Incorporation+of+DICOM+WG18+Supplement+142+into+CTP. Accessed 28 February 2011
  10. 10.
    Noumeir R, Lemay A, Lina JM: Pseudonymization of radiology data for research purposes. J Digit Imaging. 20(3):284–295, 2007PubMedCrossRefGoogle Scholar
  11. 11.
    Hrynaszkiewicz I, Norton M, Vickers AJ, Altman DG: Preparing raw clinical data for publication: guidance for journal editors, authors, and peer reviewers. Trials 11:9, 2010PubMedCrossRefGoogle Scholar
  12. 12.
    Health and Human Services. http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/. Accessed 28 February 2011
  13. 13.
    National Institutes of Health. http://privacyruleandresearch.nih.gov/pdf/FinalEnforcementRule06.pdf. Accessed 28 February 2011
  14. 14.
    National Institutes of Health. http://privacyruleandresearch.nih.gov/research_repositories.asp. Accessed 28 February 2011
  15. 15.
    González DR, Carpenter T, van Hemert JI, Wardlaw J: An open source toolkit for medical imaging de-identification. Eur Radiol. 20(8):1896–1904, 2010PubMedCrossRefGoogle Scholar
  16. 16.
    National Institutes of Health. https://imaging.nci.nih.gov/ncia/login.jsf. Accessed 28 February 2011
  17. 17.
    National Institutes of Health. http://ncicb.nci.nih.gov/. Accessed 28 February 2011
  18. 18.
    National Institutes of Health. https://wiki.nci.nih.gov/dashboard.action. Accessed 28 February 2011
  19. 19.
    National Institutes of Health. https://wiki.nci.nih.gov/display/CIP/NBIA+at+CBIIT+Image+Collections. Accessed 28 February 2011
  20. 20.
  21. 21.
    National Institutes of Health. https://wiki.nci.nih.gov/display/Imaging/Limited+dataset+−+user+agreement. Accessed 28 February 2011
  22. 22.
  23. 23.
    National Institutes of Health. https://wiki.nci.nih.gov/display/CIP/CIP+Survey+of+Biomedical+Imaging+Archives. Accessed 28 February 2011
  24. 24.
    National Institutes of Health. http://www.idoimaging.com/index.shtml. Accessed 28 February 2011
  25. 25.
    Lien C-Y, Onken M, Eichelberg M, Kao T, Hein A: “Open source tools for standardized privacy protection of medical images”, Proc. SPIE 7967, 79670M, 2011. doi:10.1117/12.877989

Copyright information

© Society for Imaging Informatics in Medicine 2011

Authors and Affiliations

  • John B. Freymann
    • 1
    • 6
  • Justin S. Kirby
    • 2
  • John H. Perry
    • 3
  • David A. Clunie
    • 4
  • C. Carl Jaffe
    • 5
  1. 1.SAIC-Frederick, Inc.RockvilleUSA
  2. 2.SAIC-Frederick, Inc.RockvilleUSA
  3. 3.Radiological Society of North AmericaOak BrookUSA
  4. 4.CoreLab Partners, Inc.PrincetonUSA
  5. 5.Boston University School of MedicineBostonUSA
  6. 6.SAIC-Frederick, Inc.BethesdaUSA

Personalised recommendations