Geomasking to Safeguard Geoprivacy in Geospatial Health Data

Geomasking to Safeguard Geoprivacy in Geospatial Health Data: History

Please note this is an old version of this entry, which may differ significantly from the current revision.

Contributor:

Geomasking is a set of techniques that introduces noise or intentional errors into geospatial data to minimize the risk of identifying exact location information related to individuals while preserving the utility of the data to a controlled extent. It protects the geoprivacy of the data contributor and mitigates potential harm from data breaches while promoting safer data sharing. The development of digital health technologies and the extensive use of individual geospatial data in health studies have raised concerns about geoprivacy. The individual tracking data and health information, if accessed by unauthorized parties, may lead to privacy invasions, criminal activities, and discrimination. These risks underscore the importance of robust protective measures in the collection, management, and sharing of sensitive data. Geomasking techniques have been developed to safeguard geoprivacy in geospatial health data, addressing the risks and challenges associated with data sharing. This entry paper discusses the importance of geoprivacy in geospatial health data and introduces various kinds of geomasking methods and their applications in balancing the protection of individual privacy with the need for data sharing to ensure scientific reproducibility, highlighting the urgent need for more effective geomasking techniques and their applications.

geomasking
geoprivacy
geospatial health data
GIS

The advance of geospatial data collection techniques and analytics methods led to the collection of high-resolution individual geospatial data for public health studies. From the detailed datasets of subjects’ residential locations and health information to the GPS tracking and wearable environmental sensors that record their daily movements and real-time environment exposures, geospatial health data contain a vast volume of details. Analyzing those individual-level geospatial data helps in understanding the nuanced relationship between environmental exposure and health outcomes. Further integrating with high-resolution geospatial context data (e.g., fine-scale census data, geographic information data, and remote sensing data) promotes exciting new research findings in health geography studies.

As geospatial data analytics grew in popularity in health studies, so did the risks of privacy breaches through decoding individual-level data or map products. It poses privacy concerns, especially when sensitive health information is involved, such as a person’s medical conditions, prescriptions, or genetic information. If the high-resolution individual geospatial data were overlayed with geographic context information via geospatial intelligence, the dataset contributors’ individual privacy was also at high risk ^[1]^[2]. Detailed geospatial information can expose the dataset contributors’ important activity locations, including home, workplace, school, family, or friends’ locations. Further details can also be derived from the GPS tracking data, which could breach the subjects’ daily movement patterns, like where and when the subjects were staying at home or going to work.

The potential exposure of subjects’ location information raises the concern of geoprivacy in geospatial health data. Geoprivacy refers to the confidentiality of dataset contributors’ personal information of activity locations, movement patterns, and any geospatial information that may expose their location privacy. The geoprivacy concern is especially important in geospatial health data, where subjects’ health information can be easily related to their locations and re-identified ^[3].

Concerns about geoprivacy mean that geospatial health data collected in one study cannot be easily shared. This limits the reusability of the scientific data and results in a significant waste of resources due to repetitive data collection ^[4]. Furthermore, this impediment to data sharing undermines reproducibility, which is one of the cornerstones of the scientific paradigm ^[2]^[5]. In the field of public health and health geography, geospatial health data are regulated by government policies, such as the Health Insurance Portability and Accountability Act ^[6] in the United States, the General Data Protection Regulation in the European Union ^[7], and the Personal Information Protection and Electronic Documents Act ^[8] in Canada. The sharing or publishing of geospatial health data is not allowed if it does not meet the geoprivacy standard ^[9]^[10]. In this context, sharing sensitive geospatial health data and promoting reproducibility of research findings in health geography studies are constrained by the efforts to protect geoprivacy. Scholars in the field are looking for solutions to balance the accessibility and the confidentiality of geospatial health data.

This entry is adapted from the peer-reviewed paper 10.3390/encyclopedia4040103

References

Kim, J.; Kwan, M.P.; Levenstein, M.C.; Richardson, D.B. How Do People Perceive the Disclosure Risk of Maps? Examining the Perceived Disclosure Risk of Maps and Its Implications for Geoprivacy Protection. Cart. Geogr. Inf. Sci. 2021, 48, 2–20.
Wang, J.; Kim, J.; Kwan, M.P. An Exploratory Assessment of the Effectiveness of Geomasking Methods on Privacy Protection and Analytical Accuracy for Individual-Level Geospatial Data. Cart. Geogr. Inf. Sci. 2022, 49, 385–406.
Ribeiro, A.I.; Dias, V.; Ribeiro, S.; Silva, J.P.; Barros, H. Geoprivacy in Neighbourhoods and Health Research: A Mini-Review of the Challenges and Best Practices in Epidemiological Studies. Public. Health Rev. 2022, 43, 1605105.
Wang, J.; Kwan, M.P. Daily Activity Locations K-Anonymity for the Evaluation of Disclosure Risk of Individual GPS Datasets. Int. J. Health Geogr. 2020, 19, 7.
McNutt, M. Reproducibility. Science 2014, 343, 229.
U.S. Department of Health and Human Services. Health Insurance Portability and Accountability Act. In Public Law; U.S. Department of Health and Human Services: Washington, DC, USA, 1996; pp. 104–191.
European Union. Regulation (EU) 2016/679 of the European Parliament and of the Council. Off. J. Eur. Union. 2016, 679, 1–88.
Canada Department of Justice. Personal Information Protection and Electronic Documents Act; Canada Department of Justice: Ottawa, ON, Canada, 2000; pp. 4356–4364.
Delmelle, E.M.; Desjardins, M.R.; Jung, P.; Owusu, C.; Lan, Y.; Hohl, A.; Dony, C. Uncertainty in Geospatial Health: Challenges and Opportunities Ahead. Ann. Epidemiol. 2022, 65, 15–30.
Tellman, N.; Litt, E.R.; Knapp, C.; Eagan, A.; Cheng, J.; Radonovich, L.J. The Effects of the Health Insurance Portability and Accountability Act Privacy Rule on Influenza Research Using Geographical Information Systems. Geospat. Health 2010, 5, 3–9.

© Text is available under the terms and conditions of the Creative Commons Attribution (CC BY) license; additional terms may apply. By using this site, you agree to the Terms and Conditions and Privacy Policy.