Restricting the right of privacy. The Burger court and claims of privacy.
Explore the source record for details and available documents.
Civil Rights↗
SEARCH · Search PubMed
Results for “privacy”
Search indexed PubMed citations on genomics, clinical trials, systematic reviews and public health. Explore titles, authors and supplied subject terms, then open the PubMed record.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Is a Win-Win possible? Achieving pareto-optimal privacy-utility balance in fine-tuned genome language model embeddings against embedding reconstruction attacks.
MOTIVATION: Genomic data is among the most sensitive categories of personal information, and the growing adoption of language models for sequence analysis raises significant privacy concerns. Prior work demonstrated that embeddings from general-purpose language models adapted for genomic sequences leak substantial single-nucleotide information under reconstruction attacks, and that fine-tuning embeddings can reduce this vulnerability at certain positions. However, three critical questions remain unaddressed: (i) whether privacy-utility tradeoffs are inherent constraints or configuration-dependent phenomena; (ii) whether genomic-specialized models such as DNABERT-base and Nucleotide Transformer exhibit different vulnerabilities than adapted general-purpose models; and (iii) how to statistically validate whether observed privacy improvements represent meaningful gains. Addressing these gaps is essential for guiding model selection in privacy-sensitive genomic applications. RESULTS: We systematically evaluated 13 transformer architectures, 9 general-purpose and 4 genomic-specialized, under position-specific embedding reconstruction attacks. We assessed the vulnerabilities of both pre-trained and fine-tuned models to the single-nucleotide inference-reconstruction attack using our new metrics, including error-based privacy gain and Pareto dominance scores, and statistically validated the results via paired t-tests. XLNet-Large achieved the best observed privacy protection among all evaluated models (+19.5% mean privacy gain) while maintaining competitive prediction performance. General-purpose models outperformed genomic-specialized models in 56% of pairwise comparisons. Tokenization strategy, rather than domain specialization, emerged as the primary determinant of the privacy-utility balance. These findings provide evidence-based guidance for selecting models in privacy-sensitive short-window genomic applications. All privacy claims in this work are specific to position-wise embedding reconstruction attacks and do not extend to other privacy risks, such as membership inference or training data extraction, which may respond differently to fine-tuning. AVAILABILITY AND IMPLEMENTATION: The code is publicly available at https://github.com/AnonymousISCBConf/Win-Win-Privacy-Utility-Analysis.
Genomics↗
Privacy-preserving framework for genomic computations via multi-key homomorphic encryption.
MOTIVATION: The affordability of genome sequencing and the widespread availability of genomic data have opened up new medical possibilities. Nevertheless, they also raise significant concerns regarding privacy due to the sensitive information they encompass. These privacy implications act as barriers to medical research and data availability. Researchers have proposed privacy-preserving techniques to address this, with cryptography-based methods showing the most promise. However, existing cryptography-based designs lack (i) interoperability, (ii) scalability, (iii) a high degree of privacy (i.e. compromise one to have the other), or (iv) multiparty analyses support (as most existing schemes process genomic information of each party individually). Overcoming these limitations is essential to unlocking the full potential of genomic data while ensuring privacy and data utility. Further research and development are needed to advance privacy-preserving techniques in genomics, focusing on achieving interoperability and scalability, preserving data utility, and enabling secure multiparty computation. RESULTS: This study aims to overcome the limitations of current cryptography-based techniques by employing a multi-key homomorphic encryption scheme. By utilizing this scheme, we have developed a comprehensive protocol capable of conducting diverse genomic analyses. Our protocol facilitates interoperability among individual genome processing and enables multiparty tests, analyses of genomic databases, and operations involving multiple databases. Consequently, our approach represents an innovative advancement in secure genomic data processing, offering enhanced protection and privacy measures. AVAILABILITY AND IMPLEMENTATION: All associated code and documentation are available at https://github.com/farahpoor/smkhe.
Computer Security↗
Safeguarding biomedical AI: a critical scoping review of privacy-enhancing technologies, hybrid approaches, and deployment models.
BACKGROUND: Biomedical artificial intelligence (AI) requires the integration of privacy-enhancing technologies (PETs) to safeguard sensitive clinical, imaging, and genomic data while preserving analytical utility. OBJECTIVES: This review critically and systematically maps applications of PETs across the biomedical AI lifecycle in accordance with PRISMA-ScR guidelines and evaluates their technical trade-offs, deployment feasibility, and residual risks. METHODS: We systematically searched PubMed, IEEE Xplore, ACM Digital Library, and Scopus for studies published between 2015 and 2025. Eligible studies addressed differential privacy, federated learning, secure multiparty computation, homomorphic encryption, or hybrid approaches in biomedical AI. Data were charted on PET type, modality, lifecycle stage, utility metrics, privacy parameters, and deployment considerations. A critical appraisal rubric assessed threat-model adequacy, methodological clarity, reproducibility, privacy-utility transparency, and deployment realism. Additionally, we hand-searched major venues (USENIX Security, NeurIPS, AAAI) and screened Google Scholar for grey literature, applying de-duplication across sources. RESULTS: We identified 87 studies spanning clinical decision support, genomics, and medical imaging. From 25,761 initial records, 3,754 underwent title/abstract screening and 1,968 underwent full-text assessment. PETs demonstrated distinct strengths and limitations: differential privacy provided provable guarantees but reduced performance on imbalanced data; federated learning improved data access but remained vulnerable to gradient leakage; and cryptographic methods ensured confidentiality at high computational cost. Synthetic data generation supported privacy-conscious data sharing and benchmarking but remained sensitive to disclosure risk, fidelity loss, and subgroup representation. Hybrid and emerging approaches, including trusted execution environments, zero-knowledge proofs, and privacy-preserving transformer architectures, mitigated composability gaps yet lacked full end-to-end assurance. Case studies at hospital and biobank scale illustrated practical feasibility and infrastructure demands. CONCLUSIONS: Situating PETs within technical and operational contexts clarifies their capabilities, limitations, and deployment challenges. Residual risks persist, including fairness concerns, inference-time leakage, and overreliance on PETs as compliance proxies. Sustained technical innovation and institutional governance remain essential for the trustworthy integration of PETs in biomedical AI.
biomedical AI↗
PRISM-G: an interpretable privacy scoring framework for assessing risk in synthetic human genome data.
MOTIVATION: Synthetic genomic data promises broader data access, but unresolved privacy risks remain a major concern. Existing evaluations often rely on similarity-based metrics that measure proximity between real and synthetic genomes, overlooking additional mechanisms through which genomic information may leak. RESULTS: We introduce PRISM-G, a model-agnostic framework that quantifies privacy exposure in synthetic genomic data across three complementary components: proximity to real genomes in genetic-coordinate space, replay of familial or population-structure patterns, and trait-linked exposure through rare variants and membership-inference signals. These components are normalized and combined through a risk-averse aggregation into a single 0-100 PRISM-G score. By pairing PRISM-G with downstream utility metrics, the framework also enables analysis of privacy-utility trade-offs across generative models. We evaluated PRISM-G on synthetic cohorts generated by a generative adversarial network (GAN), a restricted Boltzmann machine (RBM), and a logic-based SAT solver (Genomator). Our results show that privacy vulnerabilities arise along different axes across models and marker densities, demonstrating that a single similarity-based metric is insufficient to characterize genomic privacy risk. AVAILABILITY AND IMPLEMENTATION: The source code of PRISM-G is available at https://github.com/alejocrojo09/prismg.
Humans↗
Privacy, security, and reliability risks of artificial intelligence in healthcare: a systematic review of empirical evidence.
BACKGROUND: Artificial intelligence (AI) is increasingly integrated into healthcare information systems, supporting clinical decision-making, imaging analysis, and predictive modeling. While these applications offer operational and clinical benefits, they also introduce emerging risks to patient privacy, data security, and system reliability. OBJECTIVE: To systematically review empirical evidence on privacy breaches, security vulnerabilities, and misuse associated with AI applications in healthcare settings. METHODS: PubMed, Embase, Web of Science, Scopus, IEEE Xplore, and ACM Digital Library were searched for empirical studies published between January 2015 and November 2025 that evaluated AI use or misuse in clinical diagnosis, treatment, or decision-making. Two reviewers independently screened studies and extracted data using a standardized form. Findings were synthesized narratively due to heterogeneity in study designs, AI methods, and reported outcomes. RESULTS: Of 7,285 records identified through database searches and 205 through citation screening, 22 empirical studies met the inclusion criteria, spanning multiple clinical domains and data modalities, predominantly medical imaging applications. Five recurring threat categories were identified: patient re-identification, membership inference, unauthorized access and adversarial exploitation, input manipulation, and misuse or overinterpretation of AI outputs. Across studies, AI models were shown to encode latent biometric signals across diverse data types, limiting the effectiveness of traditional anonymization and synthetic data approaches. Adversarial attacks and input manipulation were also shown to compromise diagnostic performance and system integrity. CONCLUSION: This systematic review provides empirical evidence suggesting that contemporary AI systems in healthcare introduce privacy and security risks that may challenge traditional assumptions about data protection. These findings underscore the need for privacy- and security-by-design approaches and governance frameworks that address risks across the AI lifecycle.
Humans↗
PRISM: privacy-preserving rare disease analysis using fully homomorphic encryption.
MOTIVATION: Rare diseases affect millions of people worldwide, yet their genomic foundations remain poorly understood due to limited patient data and strict privacy regulations, such as the General Data Protection Regulation (GDPR) (https://gdpr.eu/tag/gdpr/) in March 2025. These restrictions can hinder the collaborative analysis of genomic data necessary for uncovering disease-causing variants. RESULTS: We present PRISM, a novel privacy-preserving framework based on fully homomorphic encryption (FHE) that facilitates rare disease variant analysis across multiple institutions without exposing sensitive genomic information. To address the challenges of centralized trust, PRISM is built upon a Threshold FHE scheme. This approach decentralizes key management across participating institutions and ensures no single entity can unilaterally decrypt sensitive data. Our method filters disease-causing variants under recessive, dominant, and de novo inheritance models entirely on encrypted data. We propose two algorithmic variants: a multiplication-intensive (MUL-IN) approach and an addition-intensive (ADD-IN) approach. The ADD-IN algorithms minimize the number of costly multiplication operations, enabling up to a 17× improvement in runtime for recessive/dominant filtering and 22× for de novo filtering, compared to MUL-IN methods. While ADD-IN produces larger ciphertexts, efficient parallelization via SIMD and multithreading allows it to handle millions of variants in reasonable time. To the best of our knowledge, this is the first study that utilizes FHE for privacy-preserving rare disease analysis across multiple inheritance models, demonstrating its practicality and scalability in a single-cloud setting. AVAILABILITY AND IMPLEMENTATION: The source code and the data used in this work can be found in https://github.com/mdppml/PRISM.git.
Computer Security↗
Privacy-hardened and hallucination-resistant synthetic data generation with logic-solvers.
MOTIVATION: Machine-generated or synthetic data is a valuable resource for training artificial intelligence algorithms, evaluating rare workflows, and sharing data under stricter data legislations. However, current statistical and deep learning methods struggle with large data volumes, are prone to hallucinating scenarios incompatible with reality, and seldom quantify privacy meaningfully. RESULTS: Here, we introduce Genomator, a logic solving approach (SAT solving), which efficiently produces private and realistic representations of the original data. We demonstrate the method on genomic data, which arguably is the most complex and private information. We benchmark Genomator against state-of-the-art methodologies (Markov generation, Wasserstein Generative Adversarial Network and Conditional Restricted Boltzmann Machines), demonstrating a 40%-530% accuracy improvement and 57%-172% higher privacy. Genomator is also 3-100 times more efficient, making it the only tested method that scales to whole genomes. We show the universal trade-off between privacy and accuracy, and use Genomator's tuning capability to cater to all applications along the spectrum, from provable private representations of sensitive cohorts, to datasets with indistinguishable pharmacogenomic profiles. Demonstrating the production-scale generation of tuneable synthetic genomes hold great potential for balancing underrepresented populations in medical research and advancing global data exchange. AVAILABILITY AND IMPLEMENTATION: Genomator is available at https://github.com/csiro/genomator.
Algorithms↗
A Sociotechnical Approach to Genomic Data Privacy: A Comparative Analysis.
The sharing of genomic data across international borders presents significant privacy law challenges.Secured computed environments on smartphones allow the storing and processing of sensitive data without the underlying data being shared with processors.A novel technology, described here, to process genomic data within a secured computing environment seems to comport with EU and US privacy laws, despite their differing aims and rules.This technology suggests there may be technological solutions to privacy law fragmentation across jurisdictions, so long as data subjects socially trust the technology and have control over their data.
genome↗
Privacy-Preserving Linkage of Distributed Biological, Clinical, and Imaging Data Supporting Artificial Intelligence in Pediatric Oncology.
BACKGROUND: Cancer remains the leading cause of disease-related mortality in children over the age of one in Europe, with over 35,000 new pediatric cases and more than 6,000 deaths annually. Due to the rarity of pediatric cancers, clinical trial protocols often substitute for formal treatment guidelines, resulting in many children being enrolled in multiple trials, with biological samples and genomic data stored in various biobanks. Data collection in pediatric oncology is challenging, with sparse data acquired over extended periods, underscoring the need for optimal utilization of all available information through linked, privacy-preserving datasets. METHODS: Here, we report the development of a distributed, privacy-preserving data infrastructure for the PRIMAGE project, a European initiative aimed at supporting artificial intelligence (AI)-driven image analysis for pediatric cancer prognostics. The infrastructure leverages the European Patient Identity (EUPID) Services for Privacy-Preserving Record Linkage, enabling pseudonymized data integration across clinical, biological, and imaging sources. The system incorporates EUPID's hashing and phonetic matching protocols to pseudonymize patient identifiers and link distributed datasets, facilitating secondary data use in compliance with the General Data Protection Regulation. RESULTS: Data from over 700 neuroblastoma patients from European trials and hospitals were linked and uploaded to the PRIMAGE platform, where AI models predict clinical outcomes. CONCLUSION: This infrastructure successfully facilitated AI model development, advancing pediatric oncology research, and offering a scalable framework for future European health data initiatives, such as the European Health Data Space.
Journal Article↗
Ethical Governance of Open Data Across Biomedical Research, Healthcare, and Public Health: Privacy, Equity, Trust, and Controlled Access.
Open data has become central to biomedical research and public health, but health information is uniquely sensitive and difficult to share responsibly. In this narrative review, open data is considered as a spectrum of health-data sharing arrangements, ranging from public aggregate datasets to controlled-access repositories, federated analysis, and synthetic data. This narrative review synthesizes the scientific and societal rationale for greater openness with the ethical, legal, and governance constraints that shape what "open" can realistically mean in healthcare. We examine how data sharing supports reproducibility, machine learning, and more efficient research, while also enabling public health surveillance and learning health systems. Against these benefits, we analyze privacy and re-identification risks, consent challenges in large-scale secondary use, inequities including data colonialism, and tensions introduced by commercialization. We integrate lessons from prominent case examples spanning pandemic data sharing, genomic initiatives, population registries, patient-led rare disease infrastructures, and regional data spaces. Across these domains, experience suggests that durable progress depends less on unrestricted openness than on calibrated access, privacy-preserving architectures, clear accountability, and sustained public engagement. We conclude by proposing a pragmatic ethical orientation for healthcare open data: treat openness as a spectrum of controlled sharing arrangements, embed equity and reciprocity into governance, and institutionalize trust-building measures that can persist beyond emergencies and political cycles.
Data colonialism↗
dGAMLSS: an exact, distributed algorithm to fit Generalized Additive Models for Location, Scale, and Shape for privacy-preserving population reference charts.
MOTIVATION: There is growing interest in estimating population reference ranges across age and sex to better identify atypical clinically-relevant measurements throughout the lifespan. For this task, the World Health Organization recommends using Generalized Additive Models for Location, Scale, and Shape (GAMLSS), which can model non-linear growth trajectories under complex distributions that address the heterogeneity in human populations.Fitting GAMLSS models requires large, generalizable sample sizes, especially for accurate estimation of extreme quantiles, but obtaining such multi-site data can be challenging due to privacy concerns and practical considerations. In settings where patient data cannot be shared, privacy-preserving distributed algorithms for federated learning can be used, but no such algorithm exists for GAMLSS. RESULTS: We propose distributed GAMLSS (dGAMLSS), a distributed algorithm that can fit GAMLSS models across multiple sites without sharing patient-level data. This includes specific considerations for the fitting of smooth functions at varying levels of communication efficiency. We demonstrate the effectiveness of dGAMLSS in constructing population reference charts across clinical, genomics, and neuroimaging settings and show that dGAMLSS is able to reproduce pooled reference charts and inference down to numerical differences. AVAILABILITY AND IMPLEMENTATION: An R package providing examples of the dGAMLSS algorithm, as well as functions for sharing and aggregating site-specific parameters, is available at https://github.com/hufengling/dGAMLSS.
Algorithms↗
Secure bioinformatics: privacy-preserving federated analytics using homomorphic encryption.
MOTIVATION: Large-scale bioinformatics analyses increasingly require collaboration across multiple cohorts and institutions, yet existing workflows often rely on data co-localization, which is slow, difficult to scale, and raises privacy concerns. We present a privacy-preserving federated analytics framework that enables secure statistical analysis across distributed datasets without transferring raw data, by performing all computations on encrypted data via cryptographic methods. RESULTS: We evaluate the framework by validating polygenic risk scores and conducting meta-analyses on two real-world cohorts. The proposed solution achieves over 99.9% accuracy relative to plaintext analyses, while maintaining scalable runtime performance with increasing data size and number of participating sites. These results demonstrate the feasibility of secure federated analytics for practical bioinformatics applications involving sensitive data.
Computational Biology↗
Privacy-Enhancing Sequential Learning under Heterogeneous Selection Bias in Multi-Site EHR Data.
OBJECTIVE: To develop privacy-enhancing statistical methods for estimation of binary disease risk model association parameters across multiple electronic health record (EHR) sites with heterogeneous selection mechanisms, without sharing raw individual-level data. We illustrate their utility through a cross-biobank analysis of smoking and 97 cancer subtypes using data from the NIH All of Us (AOU) and the Michigan Genomics Initiative (MGI). MATERIALS AND METHODS: Large-scale biobanks often follow heterogeneous recruitment strategies and store data in separate cloud-based platforms, making centralized algorithms infeasible. To address this, we propose two decentralized sequential estimators namely, Sequential Pseudo-likelihood (SPL) and Sequential Augmented Inverse Probability Weighting (SAIPW) that leverage external population-level information to adjust for selection bias, with valid variance estimation. SAIPW additionally protects against misspecification of the selection model using flexible machine learning based auxiliary outcome models. We compare SPL and SAIPW with the existing Sequential Unweighted (SUW) estimator and with centralized and meta learning extensions of IPW and AIPW in simulations under both correctly specified and misspecified selection mechanisms. We apply the methods to harmonized data from MGI ( n = 50,935) and AOU ( n = 241,563) to estimate smoking-cancer associations. RESULTS: In simulations, SUW exhibited substantial bias and poor coverage. SPL and SAIPW yielded unbiased estimates with valid coverage probabilities under correct model specification, with SAIPW remaining robust under selection model misspecification. Both approaches showed no notable efficiency loss relative to centralized methods. Meta-learning methods were efficient for large sites but failed in settings with small cohort sizes and rare outcome prevalence. In real-data analysis, strong associations were consistently identified between smoking and cancers of the lung, bladder, and larynx, aligning with established epidemiological evidence. CONCLUSION: Our framework enables valid, privacy-enhancing inference across EHR cohorts with heterogeneous selection, supporting scalable, decentralized research using real-world data.
Journal Article↗
Privacy, confidentiality and automated health information systems.
Professor Vuori's paper, first presented at the fourth Medico-legal Conference in Prague in the spring of this year, deals with the problem of the maintenance of confidentiality in computerized health records. Although more and more information is required, the hardware of the computer systems is so sophisticated that it would be very expensive indeed to 'break in' and steal from a modern data bank. Those concerned with programming computers are becoming more aware of their responsibilities concerning confidentiality and privacy, to the extent that a legal code of ethics for programmers is being formulated. They are also aware that the most sensitive of all relationships--the doctor-patient relationship--could be in danger if they failed to maintain high standards of integrity. An area of danger is where administrative boundaries between systems must be crossed--say between those of health and employment. Protection of privacy must be ensured by releasing full information about the type of data being stored, and by maintaining democratic control over the establishment of information systems.
Computers↗
The diminishing right of privacy: computerized medical records. Law for the nurse supervisor.
Explore the source record for details and available documents.
Computers↗
Is distribution of surgical schedule an invasion of privacy?
Explore the source record for details and available documents.
Confidentiality↗
Patients' right to privacy needs protection.
Explore the source record for details and available documents.
Confidentiality↗