Security Market Segment LS
Monday, 18 December 2017 21:11

Researchers say people can be identified from released medical data


A group of researchers from Melbourne University say it is possible to re-identify people with a high degree of confidence from de-identified medical data that was released last year.

The three researchers — Dr Vanessa Teague, Dr Christopher Culnane and Dr Benjamin Rubinstein of Melbourne University's Department of Computing and Information Systems — had identified issues with the data last year, and shown that analysing the 10% linked dataset made it possible to decrypt some service provider IDs.

The dataset was made available to the public by the Department of Health on the website but was removed after the researchers pointed out that service provider IDs could be identified.

The data was extracted from the Pharmaceutical Benefits and Medicare Benefits schemes. It included the de-identified medical billing records of 2.9 million people, or 10% of all Australians, from 1984 to 2014. The year of birth, gender, and medical events were also present.

Teague, Culnane and Rubinstein said they had found that patients could be re-identified from the data by linking unencrypted parts of the record with known information about the individual.

Last year, after the data was pulled from the Web, Attorney-General George Brandis announced that the Privacy Act would be amended to make it a criminal offence to re-identify government data that had been de-identified.

The researchers said their findings were similar to those obtained in studies of other de-identified datasets:

  • A few mundane facts taken together often suffice to isolate an individual.
  • Some patients can be identified by name from publicly available information.
  • Decreasing the precision of the data, or perturbing it statistically, makes re-identification gradually harder at a substantial cost to utility.

Teague, Culnane and Rubinstein said anyone with technical skills about the level of an under-graduate computing degree would be able to re-identify patients from the dataset.


Australia is a cyber espionage hot spot.

As we automate, script and move to the cloud, more and more businesses are reliant on infrastructure that has high potential to be exposed to risk.

It only takes one awry email to expose an accounts payable process, and for cyber attackers to cost a business thousands of dollars.

In the free white paper ‘6 steps to improve your Business Cyber Security’ you will learn some simple steps you should be taking to prevent devastating malicious cyber attacks from destroying your business.

Cyber security can no longer be ignored, in this white paper you will learn:

· How does business security get breached?
· What can it cost to get it wrong?
· 6 actionable tips


Sam Varghese

website statistics

Sam Varghese has been writing for iTWire since 2006, a year after the site came into existence. For nearly a decade thereafter, he wrote mostly about free and open source software, based on his own use of this genre of software. Since May 2016, he has been writing across many areas of technology. He has been a journalist for nearly 40 years in India (Indian Express and Deccan Herald), the UAE (Khaleej Times) and Australia (Daily Commercial News (now defunct) and The Age). His personal blog is titled Irregular Expression.



Recent Comments