Chapter 5: Privacy and Ethical Governance

5.1 The Privacy-Research Tension

Medical research data presents a fundamental tension: research benefits from rich, linked, longitudinal data, while privacy protection demands data minimization and access restrictions. Navigating this tension requires robust ethical frameworks, technical safeguards, and governance structures that enable research while protecting individuals.

The goal is not to choose between privacy and research, but to achieve both through thoughtful data governance. Privacy-preserving techniques, controlled access, and transparent data use agreements can enable valuable research while respecting individual rights.

5.2 Regulatory Framework

Multiple regulations govern research data privacy across jurisdictions:

Key Regulations

Regulation	Scope	Research Provisions
HIPAA (US)	Protected health information	Limited dataset, de-identification, waiver of authorization
GDPR (EU)	Personal data of EU residents	Scientific research exemption, pseudonymization
Common Rule (US)	Federally funded research	IRB oversight, informed consent
PIPA (Korea)	Personal information	Pseudonymized data for research
PIPEDA (Canada)	Personal information	Research without consent in limited cases

5.3 De-identification and Anonymization

Removing identifying information enables broader data sharing:

De-identification Methods

Method	Approach	Residual Risk
Safe Harbor	Remove 18 HIPAA identifiers	Re-identification through quasi-identifiers
Expert Determination	Statistical analysis of risk	Lower if properly conducted
k-Anonymity	Each record indistinguishable from k-1 others	Homogeneity, background knowledge attacks
l-Diversity	Each equivalence class has l distinct sensitive values	Skewness, similarity attacks
Differential Privacy	Add calibrated noise to queries	Utility-privacy tradeoff

5.4 Informed Consent Models

Consent is foundational to ethical research data use:

Consent Approaches

• Specific Consent: Permission for defined research project only
• Broad Consent: Permission for future unspecified research
• Tiered Consent: Granular choices about data types and uses
• Dynamic Consent: Ongoing engagement with evolving permissions
• Meta-Consent: Choice of preferred consent model

5.5 Data Access Governance

Governance structures control who can access data and for what purposes:

Access Models

Model	Description	Appropriate For
Open Access	No restrictions, freely available	Aggregated, fully anonymized data
Registered Access	Requires user registration	Low-risk data, tracking usage
Controlled Access	Application and review process	Individual-level, sensitive data
Federated Analysis	Query without data transfer	Highly sensitive, multi-site data
Secure Enclave	Analysis in controlled environment	Maximum protection required

Data Access Committee Functions

• Application Review: Evaluate scientific merit and data needs
• Ethics Assessment: Confirm appropriate protections
• Agreement Execution: Data use agreements and terms
• Compliance Monitoring: Verify adherence to conditions
• Incident Response: Address breaches or misuse

5.6 Privacy-Enhancing Technologies

Technical solutions enable analysis while protecting privacy:

Technology	Mechanism	Application
Differential Privacy	Mathematically guaranteed noise addition	Aggregate queries, statistics
Federated Learning	Models trained locally, only parameters shared	Multi-site ML without data sharing
Secure Multiparty Computation	Joint computation without revealing inputs	Cross-institutional analysis
Homomorphic Encryption	Computation on encrypted data	Cloud analysis of sensitive data
Synthetic Data	Generated data preserving statistical properties	Method development, education

5.7 Ethical Data Stewardship

Beyond compliance, ethical stewardship considers broader responsibilities:

Ethical Principles

• Respect for Persons: Honor autonomy, protect vulnerable populations
• Beneficence: Maximize benefits, minimize harms
• Justice: Fair distribution of research benefits and burdens
• Transparency: Clear communication about data uses
• Accountability: Mechanisms for oversight and redress
• Data Solidarity: Recognize collective value of shared data