Routes for breaching and protecting genetic privacy

• Published in: Nature reviews. Genetics Vol. 15; no. 6; pp. 409 - 421
• Main Authors: Erlich, Yaniv, Narayanan, Arvind
• Format: Journal Article
• Language: English
• Published: London Nature Publishing Group UK 01.06.2014; Nature Publishing Group
• Subjects: 631/114/129/2043; 631/114/2402; 631/208/514/1948; 706/648/179; Agriculture; Animal Genetics and Genomics; Biomedical research; Biomedicine; Cancer Research; Computer Security; Datasets; Ethical aspects; Gene Function; Genetic Privacy; Genetic research; Genetic testing; Genetics; Genetics, Medical; Genotype & phenotype; Human Genetics; Humans; Laws, regulations and rules; Metadata; Privacy; Privacy, Right of; Research ethics; review-article; Success; United Kingdom; United States > US
• ISSN: 1471-0056; 1471-0064; 1471-0064
• DOI: 10.1038/nrg3723

Key Points Privacy breaching techniques can work by cross-referencing two or more pieces of information to gain new, potentially harmful, knowledge on individuals or their families. Broadly speaking, the main routes to breach privacy are identity tracing, attribute disclosure attacks using DNA (ADAD) and completion of sensitive DNA information. Identity tracing exploits quasi-identifiers in the DNA data or metadata to uncover the identity of an unknown genetic data set. ADAD links the identity of a known person to a sensitive phenotype using DNA-derived data. Completion techniques also work on known DNA data and aim to uncover sensitive genomic areas that were masked to protect the participant. In the past few years, the range of techniques and tools to carry out privacy breaching attacks has expanded. Although most of these techniques are currently beyond the reach of the general public, they can be implemented by trained persons with varying degrees of effort and success. There is considerable debate regarding risk management. Some support a pragmatic, ad-hoc approach of privacy by obscurity, whereas others support a systematic, mathematical approach of privacy by design. Privacy-by-design algorithms include access control, differential privacy and cryptographic techniques. So far, data custodians of genetic databases have primarily adopted access control as a mitigation strategy. New developments in cryptographic methods may usher in additional 'security-by-design' techniques. Data sharing in genetics is essential to ensure research progress. However, concerns about the impact on privacy of data originators have been raised. This Review summarizes privacy breaching strategies and potential mitigation methods for privacy-preserving dissemination of sensitive data, and highlights different cases that are relevant to genetic applications. We are entering an era of ubiquitous genetic information for research, clinical care and personal curiosity. Sharing these data sets is vital for progress in biomedical research. However, a growing concern is the ability to protect the genetic privacy of the data originators. Here, we present an overview of genetic privacy breaching strategies. We outline the principles of each technique, indicate the underlying assumptions, and assess their technological complexity and maturation. We then review potential mitigation methods for privacy-preserving dissemination of sensitive data and highlight different cases that are relevant to genetic applications.