Matching Known Patients to Health Records in Washington State Data

The state of washington sells patient-level health data for $50. This publicly available data-set has virtually all hospitalizations occurring in the state in a given year, including patient demographics, diagnoses, procedures, attending physician, hospital, a summary of charges, and how the bill was paid. It does not contain patient names or addresses (only ZIPs). Newspaper stories printed in the state for the same year that contain the word "hospitalized” often include a patient’s name and residential information and explain why the person was hospitalized, such as vehicle accident or assault. News information uniquely and exactly matched medical records in the state database for 35 of the 81 cases (or 43 percent) found in 2011, thereby putting names to patient records. A news reporter verified matches by contacting patients. Employers, financial organizations and others know the same kind of information as reported in news stories making it just as easy for them to identify the medical records of employees, debtors, and others.

[1]  B. Friedman,et al.  A re-examination of distance as a proxy for severity of illness and the implications for differences in utilization by race/ethnicity. , 2007, Health economics.

[2]  L Sweeney,et al.  Weaving Technology and Policy Together to Maintain Confidentiality , 1997, Journal of Law, Medicine & Ethics.

[3]  L. Sweeney.  Simple Demographics Often Identify People Uniquely , 2000 .

[4]  Latanya Sweeney,et al.  Identifying Participants in the Personal Genome Project by Name , 2013, ArXiv.

[5]  Marcia M Ward,et al.  Effect of critical access hospital conversion on patient safety. , 2007, Health services research.

[6]  Sanya Carley,et al.  The American Recovery and Reinvestment Act , 2014 .

[7]  Daniel C. Barth-Jones,et al.  The 'Re-Identification' of Governor William Weld's Medical Information: A Critical Re-Examination of Health Data Identification Risks and Privacy Protections, Then and Now , 2012 .

[8]  Latanya Sweeney,et al.  Putting health IT on the path to success. , 2013, JAMA.

[9]  B. Woodward.  The computer-based patient record and confidentiality. , 1995, The New England journal of medicine.

[10]  Arpit Misra.  Impact of the HealthChoice Program on Cesarean Section and Vaginal Birth after C-Section Deliveries: A Retrospective Analysis , 2008, Maternal and Child Health Journal.

[11]  Ted R Miller,et al.  Characteristics of motorcycle-related hospitalizations: comparing states with different helmet laws. , 2007, Accident; analysis and prevention.

[12]  Hhs Centers for Medicare Medicare Services.  Medicare and Medicaid programs; electronic health record incentive program. Final rule. , 2010, Federal register.

[13]  P. Owens,et al.  Medicaid markets and pediatric patient safety in hospitals. , 2007, Health services research.

[14]  E. Herz,et al.  American Recovery and Reinvestment Act of 2009 (ARRA, P.L. 111-5): Title V, Medicaid Provisions , 2009 .

[15]  Latanya Sweeney,et al.  Survey of Publicly Available State Health Databases , 2013, ArXiv.