Identifying and prioritizing benefits and risks of using privacy-enhancing software through participatory design: a nominal group technique study with patients living with chronic conditions. (19th May 2021)

• Record Type: Journal Article
• Authors: Giannouchos, Theodoros V; Ferdinand, Alva O; Ilangovan, Gurudev; Ragan, Eric; Nowell, W Benjamin; Kum, Hye-Chung; Schmit, Cason D
• Is Part Of: Journal of the American Medical Informatics Association. Volume 28:Number 8(2021)
• Page Start: 1746
• Page End: 1755
• Publication Date: 2021-05-19
• Subjects: Privacy -- patient perception -- Nominal group technique -- record linkage -- patient matching; Medical informatics -- Periodicals; Information Services -- Periodicals; Medical Informatics -- Periodicals; Médecine -- Informatique -- Périodiques; Informatica; Geneeskunde; Informatique médicale; Computer network resources; Electronic journals; 610.285
• DOI: 10.1093/jamia/ocab073
• Languages: English
• ISSNs: 1067-5027

Abstract

Abstract: Objective: While patients often contribute data for research, they want researchers to protect their data. As part of a participatory design of privacy-enhancing software, this study explored patients' perceptions of privacy protection in research using their healthcare data. Materials and Methods: We conducted 4 focus groups with 27 patients on privacy-enhancing software using the nominal group technique. We provided participants with an open source software prototype to demonstrate privacy-enhancing features and elicit privacy concerns. Participants generated ideas on benefits, risks, and needed additional information. Following a thematic analysis of the results, we deployed an online questionnaire to identify consensus across all 4 groups. Participants were asked to rank-order benefits and risks. Themes around "needed additional information" were rated by perceived importance on a 5-point Likert scale. Results: Participants considered "allowance for minimum disclosure" and "comprehensive privacy protection that is not currently available" as the most important benefits when using the privacy-enhancing prototype software. The most concerning perceived risks were "additional checks needed beyond the software to ensure privacy protection" and the "potential of misuse by authorized users." Participants indicated a desire for additional information with 6 of the 11 themes receiving a median participant rating of "very necessary" and rated "information on the data custodian" as "essential." Conclusions: Patients recognize not only the benefits of privacy-enhancing software, but also inherent risks. Patients desire information about how their data are used and protected. Effective patient engagement, communication, and transparency in research may improve patients' comfort levels, alleviate patients' concerns, and thus promote ethical research.