Addressing Disclosure Concerns and Analysis Demands in a Real-Time Online Analytic System

Abstract

This article focuses on methods for enhancing access to survey data produced by government agencies. In particular, the National Center for Health Statistics (NCHS) is developing methods that could be used in an interactive, integrated, real-time online analytic system (OAS) to facilitate analysis by the public of both restricted and public use survey data. Data from NCHS’ National Health Interview Survey (NHIS) are being used to investigate, develop, and evaluate such methods. We assume the existence of public use microdata files, as is the case for the NHIS, so disclosure avoidance methods for such an OAS must account for that critical constraint. Of special interest is the analysis of state-level data because health care is largely administered at the state level in the U.S., and state identifiers are not on the NHIS public use files. This article describes our investigations of various possible choices of methods for statistical disclosure control and the challenges of providing such protection in a real-time OAS that uses restricted data. Full details about the specific disclosure control methods used by a working OAS could never be publicly released for confidentiality reasons. NCHS is still evaluating whether to implement an OAS that uses NHIS restricted data, and this article provides a snapshot of a research and developmental project in progress.

Keywords

Confidentiality data utility disclosure risk statistical disclosure control

References

Chipperfield, J. and Yu, F. (2011). Protecting Confidentiality in a Remote Analysis Server for Tabulation and Analysis of Data. Joint UNECE/Eurostat work session on statistical data confidentiality (Tarragona, Spain, 26-28 October 2011). United Nations Economic Commission for Europe (UNECE). Conference of European Statisticians, European Commission Statistical Office of the European Union (Eurostat).

Dalenius, T. and Reiss, S. (1982). Data-swapping: A Technique for Disclosure Control. Journal of Statistical Planning and Inference, 6, 73-85.

Deming, W.E. and Stephan, F.F. (1940). On a Least Square Adjustment of a Sampled Frequency Table When the Expected Marginal Totals Are Known. Annals of Mathematical Statistics, 11, 427-444.

Duncan, G.T., Elliot, M., and Salazar-Gonza´lez, J. (2011). Statistical Confidentiality: Principles and Practice. New York: Springer.

FCSM (2005). Report on Statistical Disclosure Methodology. Statistical Policy Working Paper 22 of the Federal Committee on Statistical Methodology, 2nd version. Revised by Confidentiality and Data Access Committee 2005, Statistical and Science Policy, Office of Information and Regulatory Affairs, Office of Management and Budget. Available at: http://www.fcsm.gov/working-papers/SPWP22_rev.pdf (accessed October 21, 2012).

Fienberg, S.E. (2009). The Relevance or Irrelevance of Weights for Confidentiality and Statistical Analyses. Journal of Privacy and Confidentiality: Vol. 1: Iss. 2, Article 4. Available at: http://repository.cmu.edu/jpc/vol1/iss2/4 (accessed February 1, 2013).

Fienberg, S.E. and McIntyre, J. (2005). Data Swapping: Variations on a Theme by Dalenius and Reiss. Journal of Official Statistics, 21, 309-323.

Fraser, B. and Wooten, J. (2005). A Proposed Method for Confidentialising Tabular Output to Protect Against Differencing. Paper presented at the November 2005 UNECE Work Session on statistical data confidentiality.

Freiman, M., Lucero, J., Singh, L., You, J., DePersio, M., and Zayatz, L. (2011). The Microdata Analysis System at the U.S. Census Bureau. Proceedings of the Joint Statistical Meetings, American Statistical Association Section on Survey Research Methods.

10.

Gentleman, J.F. (2011). A Real-Time Online System for Analyzing Restricted Data from the U.S. National Center for Health Statistics’ National Health Interview Survey. Proceedings of the 58th World Statistics Congress of the International Statistical Institute. Available at: http://isi2011.congressplanner.eu/pdfs/650208.pdf (accessed February 1, 2013).

11.

Gentleman, J.F. (2012). Using the National Health Interview Survey to Monitor the Early Effects of the Affordable Care Act. Proc. 2012 Joint Statistical Meetings, San Diego.

12.

Hundepool, A., Domingo-Ferrer, J., Franconi, L., Giessing, S., Nordholt, E.S., Spicer, K., and de Wolf, P.-P. (2012). Data Access Issues. In Statistical Disclosure Control. Chichester, UK: John Wiley & Sons. doi: 10.1002/9781118348239.ch6.

13.

IHIS (2012). Minnesota Population Center and State Health Access Data Assistance Center, Integrated Health Interview Series: Version 5.0. Minneapolis: University of Minnesota, 2012. Available at: http://www.ihis.us (accessed November 23, 2012).

14.

Kaufman, S., Seastrom, M., and Roey, S. (2005). Do disclosure controls to protect confidentiality degrade the quality of the data? Proceedings of the Joint Statistical Meetings, American Statistical Association Section on Government Statistics. Alexandria, VA: American Statistical Association.

15.

Krenzke, T., Li, J., Judkins, D., and Larsen, M. (2011a). Evaluating a Constrained Hotdeck to Perturb American Community Survey Data for the Transportation Planning Products. Proceedings of the Joint Statistical Meetings, American Statistical Association Section on Survey Research Methods.

16.

Krenzke, T., Li, J., Freedman, M., Judkins, D., Hubble, D., Roisman, R., and Larsen, M. (2011b). Producing Transportation Data Products from the American Community Survey that Comply with Disclosure Rules. Washington, DC: National Cooperative Highway Research Program, Transportation Research Board, National Academy of Sciences.

17.

Lucero, J., Zayatz, L., Singh, L., You, J., DePersio, M., and Freiman, M. (2011). The Current Stage of the Microdata Analysis System at the US Census Bureau. Proceedings of the 58th World Statistics Congress of the International Statistical Institute. Available at:http:\\isi2011.congressplanner.eu/pdfs/650103.pdf (accessed February 1, 2013).

18.

Meyer, P., Robinson, E.S., and Madans, J. (2012). Protecting Confidentiality in a Data Enclave. Statistical Journal of the IAOS, 28, 25-30.

19.

NCHS RDC (2011). National Center for Health Statistics Research Data Center website link http://www.cdc.gov/rdc/ (accessed February 1, 2013). National Center for Health Statistics, Centers for Disease Control and Prevention. U.S. Department of Health and Human Services.

20.

NCES (2003). NCES Statistical Standards. NCES 2003-601. Washington, DC: 2003. Available at: http://nces.ed.gov/statprog/2002/std5_3.asp (accessed February 1, 2013).

21.

NHIS (2010). National Health Interview Survey Description document. Available at: ftp://ftp.cdc.gov/pub/Health_Statistics/NCHS/Dataset_Documentation/NHIS/2010/srvydesc.pdf (accessed February 1, 2013). Division of Health Interview Statistics, National Center for Health Statistics. Centers for Disease Control and Prevention. U.S. Department of Health and Human Services.

22.

NHIS (2011). National Health Interview Survey website link, http://www.cdc.gov/nchs/nhis.htm (accessed February 1, 2013). National Center for Health Statistics, Centers for Disease Control and Prevention. U.S. Department of Health and Human Services.

23.

ONS (2006). Review of the Dissemination of Health Statistics: Confidentiality Guidance. Health and Care. London, UK: Office for National Statistics. Ramanayake and Zayatz (2010). Balancing Disclosure Risk with Data Quality. Research Report Series (Statistics #2010-04). Statistical Research Division, U.S. Census Bureau, Washington, D.C.

24.

Reiter, J. (2003). Model Diagnostics for Remote-Access Regression Servers. Statistics and Computing, 13, 371-380.

25.

Shlomo, N. and Skinner, C. (2010). Assessing the Protection Provided by Misclassification- Based Disclosure Limitation Methods for Survey Microdata. Annals of Applied Statistics, 4, 1291-1310.

26.

Simard, M. (2011). Real Time Remote Access at Statistics Canada: Development, Challenges, and Issues. Proceedings of the 58th World Statistics Congress of the International Statistical Institute. Available at: isi2011.congressplanner. eu/pdfs/650096.pdf (accessed February 1, 2013).

27.

Skinner, C.J. and Shlomo, N. (2008). Assessing Identification Risk in Survey Microdata Using Log-linear Models. Journal of American Statistical Association, 103, 989-1001.

28.

Statistics Netherlands (2008). m-ARGUS version 4.2 User’s Manual. Available at: http://neon.vb.cbs.n1/casc/Software/MuManual4.2.pdf (accessed February 1, 2013).

29.

Sweeney, L. (2002). Achieving k-anonymity Privacy Protection Using Generalization and Suppression. International Journal on Uncertainty, Fuzziness and Knowledge-based Systems, 10, 571-588.

30.

Tam, S. (2011). On-line Access of Micro-Data at the Australian Bureau of Statistics - Challenges and Future Directions. Proceedings of the 58th World Statistics Congress of the International Statistical Institute. Available at: isi2011.congressplanner. eu/pdfs/650030.pdf (accessed February 1, 2013).

31.

UCLA (2012). AskCHIS website: http://ask.chis.ucla.edu/main/default.asp (Accessed February 1, 2013). University of California, Los Angeles Center for Health Policy Research.

32.

Woo, M., Reiter, J., Oganian, A., and Karr, A. (2009). Global Measures of Data Utility for Microdata Masked for Disclosure Limitation. The Journal of Privacy and Confidentiality, 1, 111-124.