Home Security Researchers say people can be identified from released medical data

A group of researchers from Melbourne University say it is possible to re-identify people with a high degree of confidence from de-identified medical data that was released last year.

The three researchers — Dr Vanessa Teague, Dr Christopher Culnane and Dr Benjamin Rubinstein of Melbourne University's Department of Computing and Information Systems — had identified issues with the data last year, and shown that analysing the 10% linked dataset made it possible to decrypt some service provider IDs.

The dataset was made available to the public by the Department of Health on the data.gov.au website but was removed after the researchers pointed out that service provider IDs could be identified.

The data was extracted from the Pharmaceutical Benefits and Medicare Benefits schemes. It included the de-identified medical billing records of 2.9 million people, or 10% of all Australians, from 1984 to 2014. The year of birth, gender, and medical events were also present.

Teague, Culnane and Rubinstein said they had found that patients could be re-identified from the data by linking unencrypted parts of the record with known information about the individual.

Last year, after the data was pulled from the Web, Attorney-General George Brandis announced that the Privacy Act would be amended to make it a criminal offence to re-identify government data that had been de-identified.

The researchers said their findings were similar to those obtained in studies of other de-identified datasets:

  • A few mundane facts taken together often suffice to isolate an individual.
  • Some patients can be identified by name from publicly available information.
  • Decreasing the precision of the data, or perturbing it statistically, makes re-identification gradually harder at a substantial cost to utility.

Teague, Culnane and Rubinstein said anyone with technical skills about the level of an under-graduate computing degree would be able to re-identify patients from the dataset.


With 50+ Speakers, 300+ senior data and analytics executives, over 3 exciting days you will indulge in all things data and analytics before leaving with strategic takeaways that will catapult you ahead on your journey

· CDAO Sydney is designed to bring together senior executives in data and analytics from progressive organisations
· Improve operations and services
· Future proof your organisation in this rapidly changing technological landscape
· CDAO Sydney 2-4 April 2019
· Don’t miss out! Register Today!
· Want to find out more? Download the Agenda



Australia is a cyber espionage hot spot.

As we automate, script and move to the cloud, more and more businesses are reliant on infrastructure that has the high potential to be exposed to risk.

It only takes one awry email to expose an accounts’ payable process, and for cyber attackers to cost a business thousands of dollars.

In the free white paper ‘6 Steps to Improve your Business Cyber Security’ you’ll learn some simple steps you should be taking to prevent devastating and malicious cyber attacks from destroying your business.

Cyber security can no longer be ignored, in this white paper you’ll learn:

· How does business security get breached?
· What can it cost to get it wrong?
· 6 actionable tips


Sam Varghese

website statistics

Sam Varghese has been writing for iTWire since 2006, a year after the sitecame into existence. For nearly a decade thereafter, he wrote mostly about free and open source software, based on his own use of this genre of software. Since May 2016, he has been writing across many areas of technology. He has been a journalist for nearly 40 years in India (Indian Express and Deccan Herald), the UAE (Khaleej Times) and Australia (Daily Commercial News (now defunct) and The Age). His personal blog is titled Irregular Expression.


Popular News




Sponsored News