The Zipper: a method for using personal identifiers to link data while preserving confidentiality.

OBJECTIVE This report describes a method for linking separate confidential data sets that contain personal identifying information while preserving required anonymity. METHODS Research data were linked with child abuse and neglect (CAN) report data by an independent "safe" analyst using an identical set of unique identifier codes assigned to each case in both data sets after all personal identifiers had been removed. RESULTS The research team never learned CAN report status of individuals, the state agency never saw the research data, and the desired analyses were completed using the merged data set. CONCLUSIONS The method was successfully used to merge data from separate sources without divulging confidential information.

[1]  C Wang,et al.  A CORBA-based object framework with patient identification translation and dynamic linking. Methods for exchanging patient data. , 1999, Methods of information in medicine.

[2]  V. Livolsi,et al.  Use of human tissues in research: clarifying clinician and researcher roles and information flows. , 1997, Journal of investigative medicine : the official publication of the American Federation for Clinical Research.

[3]  C. Kivlahan,et al.  Sexual assault examinations in children. The role of a statewide network of health care providers. , 1992, American journal of diseases of children.

[4]  P. Åstedt‐Kurki,et al.  Ethical Problems in Research on Families Who Are Abusing Children , 1998, Nursing ethics.

[5]  E J Breen,et al.  Hash function performance on different biological databases. , 1989, Computer methods and programs in biomedicine.

[6]  L Papoz,et al.  Case counting in epidemiology: limitations of methods based on multiple data sources. , 1996, International journal of epidemiology.

[7]  L Dusserre,et al.  Extraction and anonymity protocol of medical file. , 1996, Proceedings : a conference of the American Medical Informatics Association. AMIA Fall Symposium.

[8]  Effect of Prenatal Ultrasound Screening on Perinatal Outcome , 1993 .

[9]  R. Kruse,et al.  Mortality from lower respiratory infection in nursing home residents. A pilot prospective community-based study. , 1998, The Journal of family practice.

[10]  L Dusserre,et al.  Automatic Record Hash Coding and Linkage for Epidemiological Follow-up Data Confidentiality , 1998, Methods of Information in Medicine.

[11]  S. Gable,et al.  Beyond parenting skills: Battling barriers and building bonds to prevent child abuse and neglect , 1997 .

[12]  B. Ewigman,et al.  The Missouri child fatality study: underreporting of maltreatment fatalities among children younger than five years of age, 1983 through 1986. , 1993, Pediatrics.

[13]  C. Crosson-Tower,et al.  Understanding Child Abuse and Neglect , 1987 .