Workshop on
Intelligent Methods for Protecting Privacy and Confidentiality in Data

May 30th, 2010, Ottawa

With the increasing adoption of electronic medical/health records and the rising use of electronic data capture tools in clinical research, large electronic repositories of personal health information (PHI) are being built up. At the same time, large medical data breaches are becoming common. Data breaches may be caused by errors committed by insiders at the data custodian sites, or by malicious insiders. Data breaches can also be caused by outsiders breaking into the data repositories. These data breaches represent legal and financial liabilities for the data custodians, and erode public trust in the ability of data custodians to manage their PHI.

An area that has grown in importance to manage the risks from breaches is data leak prevention (DLP). DLP technologies monitor communications or networks to detect PHI leaks. When a leak is detected the affected individual or organization is notified, at which point they can take remedial action. DLP can prevent a PHI leak or detect it after it happens. For example, if DLP is deployed to monitor email then a PHI alert can be generated before the email is sent. If DLP is used to monitor PHI leaks on the Internet (e.g., on peer-to-peer file sharing networks or on web sites), then the alerts pertain to leaks that have already occurred, at which point the affected individual or data custodian can attempt to contain the damage and stop further leaks.

Computational AI is a key enabling technology for next-generation DLP technologies. This workshop aims to bring together researchers working on computational tools for DLP.

Topics of interest include, but are not limited to:

• reviews
  • reviews of DLP systems and methods; and
  • reviews of PHI leaks that are occurring.
• methods
• detection of personally identifying information in text;
• detection of health information in different types of text (e.g., professionally written vs. lay person generated); and
• re-identification risk assessment;
• applications
  • monitoring the web and peer-to-peer file sharing networks for PHI leaks;
  • detection of PHI in email or other communications; and
  • tools for dealing with PHI leaks in an automated way (e.g., de-identification).
• evaluation
  • empirical evaluation of deployed systems;
  • theoretical methods of risk assessment; and
  • new methods for evaluating such systems.

Workshop Program

Download the full proceedings from here:
http://www.ehealthinformation.ca/documents/IMPPCD-2010.pdf

9:30 am to 10:00 am	Coffee & Muffins
10:00 am to 11:00 am	Panel: The Reality of DLP for Health Care Providers Tyson Roffey,Chief Information Officer and Chief Privacy Officer, Children's Hospital of Eastern Ontario Anne Lavigne, Privacy Officer, The Ottawa Hospital Khaled El Emam, University of Ottawa and CHEO RI Moderator: Liam Peyton, University of Ottawa
11:00 am to 11:30 am	DLP is Not Just a Box: Trends in DLP Blair Canavan, TITUS Labs Inc.
11:30 am to 12:00 pm	A Systematic Approach to PHI Leak Prevention in Continuous Health Care Data Integration Jun Hu, University of Ottawa Liam Peyton, University of Ottawa Khaled El Emam, University of Ottawa and CHEO RI
12:00 pm to 1:00 pm	Lunch
1:00 pm to 1:30 pm	A Brief History of Inadvertent Sharing on P2P Networks: Causes, Current Solutions and Future Directions Nathan Good, Good Research / University of California, Berkeley
1:30 pm to 2:00 pm	Leakage Detection of Confidential Information in Unstructured Web Documents Amir Razavi, University of Ottawa Marina Sokolova, CHEO Research Institute
2:00 pm to 2:30 pm	Learning to Classify Medical Documents According to Formal and Informal Style Fadi Abu Sheikha, University of Ottawa Diana Inkpen, University of Ottawa
2:30 pm to 3:00 pm	Risk Analysis Framework & Architecture for DLP Systems Ahmed Al-Faresi, George Mason University Anis Alazzawe, George Mason University Duminda Wijesekera, George Mason University
3:00 pm to 3:15 pm	Closing Statements

Registration & Location

The workshop is being held in conjunction with the Canadian AI 2010 conference (http://ai2010.nlptechnologies.ca/program2010/AI_2010/)

On-line registration is available by clicking here

It will be held in room #5-084 in the SITE building (5th floor) -- please follow the signs. The address of the SITE building is:

800 King Edward Avenue
Ottawa, Ontario K1N 6N5

Workshop Chairs

• Khaled El Emam, Children's Hospital of Eastern Ontario Research Institute & University of Ottawa, Canada
  (kelemam [at] uottawa [dot] ca)
  
  
• Marina Sokolova, Children's Hospital of Eastern Ontario Research Institute, Canada
  (msokolova [at] ehealthinformation [dot] ca)

Program Committee

• Dr. David Buckeridge, McGill University, Canada
  
  
• Nigel Collier, National Institute of Informatics, Japan
  
  
• Bradley Malin, Vanderbilt University, US
  
  
• Joel Martin, National Research Council, Canada
  
  
• Stan Matwin, University of Ottawa, Canada
  
  
• Dr. Dimitar Tcharaktchiev, The Medical University, Sofia, Bulgaria
  
  
• Dr. Karen Tu, Institute for Clinical Evaluative Sciences and University of Toronto, Canada

Sponsors