Pseudonymisation

Pseudonymisation is a procedure by which all person-related data within a data record is replaced by one artificial identifier. Therefore pseudonymisation facilitates the linking of medical data and the data identifying the patient only under certain, before defined and controllable conditions. Through that medical data can be passed on to third party without this third party being able to identify the person who the medical data belong to. Under consideration of the present possibilities of the information technology as also the available technical preparations for the use of the pseudonymisation and the advantages being inherent in the pseudonymisation the pseudonymisation represents the method of choice during the use of data of the patient supply to the research, quality assurance as well as education ¹⁾.

Health records rank among the most sensitive personal information existing today. An unwanted disclosure to unauthorised parties usually results in significant negative consequences for an individual. Therefore, health records must be adequately protected in order to ensure the individual's privacy. However, health records are also valuable resources for clinical studies and research activities. In order to make the records available for privacy-preserving secondary use, thorough de-personalisation is a crucial prerequisite to prevent re-identification. This paper introduces MEDSEC, a system which automatically converts paper-based health records into de-personalised and pseudonymised documents which can be accessed by secondary users without compromising the patients' privacy. The system converts the paper-based records into a standardised structure that facilitates automated processing and the search for useful information ²⁾.