Database Integration Privacy & Security
• The need: link data sources but remove identifiers
– IRB requirements
– Ethical – if you don’t need the identifiers, you shouldn’t use them
• The solution: Blinded record linking
– For merging datasets across sites without PHI
– Using NIST Secure Hashing Algorithm
– Incorporate RSA secure key
– Keep the hashed codes centrally, no source identifiers
– Hashed codes are one-way (cannot be “undone”) but can be linked across data sources
• Established
– Public domain hashing algorithm
– “blessed” by AHRQ in registries manual as non-PHI
– Approved by IRBs, DUA at all MPOG institutions