Skip to main content
Download PDF

The perceived impact of location privacy: A web-based survey of public health perspectives and requirements in the UK and Canada

BMC Public Health volume 8, Article number: 156 (2008) Cite this article

Abstract

Background

The "place-consciousness" of public health professionals is on the rise as spatial analyses and Geographic Information Systems (GIS) are rapidly becoming key components of their toolbox. However, "place" is most useful at its most precise, granular scale – which increases identification risks, thereby clashing with privacy issues. This paper describes the views and requirements of public health professionals in Canada and the UK on privacy issues and spatial data, as collected through a web-based survey.

Methods

Perceptions on the impact of privacy were collected through a web-based survey administered between November 2006 and January 2007. The survey targeted government, non-government and academic GIS labs and research groups involved in public health, as well as public health units (Canada), ministries, and observatories (UK). Potential participants were invited to participate through personally addressed, standardised emails.

Results

Of 112 invitees in Canada and 75 in the UK, 66 and 28 participated in the survey, respectively. The completion proportion for Canada was 91%, and 86% for the UK. No response differences were observed between the two countries. Ninety three percent of participants indicated a requirement for personally identifiable data (PID) in their public health activities, including geographic information. Privacy was identified as an obstacle to public health practice by 71% of respondents. The overall self-rated median score for knowledge of privacy legislation and policies was 7 out of 10. Those who rated their knowledge of privacy as high (at the median or above) also rated it significantly more severe as an obstacle to research (P < 0.001). The most critical cause cited by participants in both countries was bureaucracy.

Conclusion

The clash between PID requirements – including granular geography – and limitations imposed by privacy and its associated bureaucracy require immediate attention and solutions, particularly given the increasing utilisation of GIS in public health. Solutions include harmonization of privacy legislation with public health requirements, bureaucratic simplification, increased multidisciplinary discourse, education, and development of toolsets, algorithms and guidelines for using and reporting on disaggregate data.

Peer Review reports

Background

Although "place" has been coined one of the three pillars of epidemiological data, only relatively recently has it garnered significant attention in the public health field, as Geographic Information Systems (GIS) have increasingly become more affordable, accessible, and intuitive. Indeed, the public health community's "place-consciousness" is on the rise as spatial analyses and GIS, now defined as part of the medical and health literature [1–3], are rapidly becoming key components of the public health professional's toolbox [4].

Privacy, an evolving "principle as old as the common law" [5], has been cited as an issue in a variety of public health events, reports, and media releases [6–11]. So much so, in fact, that one sometimes cannot help but wonder if privacy is, indeed, the enemy of public health [12], and whether they could ever peacefully co-exist [13]. A distinction should here be made between the related concepts of privacy, confidentiality, and security within the context of the current discussion. Privacy is attributable to the individual about whom identifiable information pertains, and refers to that individual's right to control such information, thereby freeing the individual from un-invited intrusion and identification. Confidentiality obligates others who have been entrusted with such information to respect the individual's privacy, and is therefore attributable to third parties; a breach of confidentiality violates the privacy of the individual because the individual has had no control over the release of the data. Finally, security refers to tools and methods used to safeguard confidentiality and privacy [14, 15]. This research deals specifically with privacy issues as regulated and defined by legislation and ethical guidelines surrounding consent. From within this context, an individual's privacy is not deemed to have been violated if data shared in the absence of consent cannot be used to identify the individual. Exception clauses generally exist in legislation, allowing authorities to release personally identifiable data under various circumstances – such as where it is deemed to be in the best interest of society or where it is impractical to obtain consent. Examples include Section 60 of the UK's Health and Social Care Act 2001 [16], and Sections 8 and 7 of Canada's Privacy Act [17] and Personal Information Protection and Electronic Documents Act [18], respectively. While an analysis of privacy legislation as it pertains to health data and the concept of "place" is beyond the scope of this paper, suffice it to say that such clauses are often ambiguous and subjective, particularly when combined with vague definitions of "sensitive personal information" and the scale at which geographic data becomes "identifiable". The concept of place, for example, is not explicitly specified as "sensitive personal data" in the UK's Data Protection Act 1988 [19], nor in the generic EU Data Protection Directive of 1995 [20] (though it is explicitly mentioned in various telecommunications directives), but postcodes are specifically mentioned in a 2005 NHS data protection and medical research POSTnote [21]. In Canada's Privacy Act [17], "address" is specifically listed as "personal information", while in the Personal Information Protection and Electronic Documents Act [18], it is not (though implied). Such ambiguities deter the sharing of data, causing organisations and authorities to err on the side of caution and not release identifying information [22], including spatial data.

It is no surprise, therefore, that the increasing popularity of "place" in public health has further exacerbated the public health research-privacy debate. Traditional health-data anonymisation techniques, such as pseudonymisation and aggregation, cannot be applied to spatial data without significantly altering or destroying the spatial relationships under investigation [23–26], and hence the very reason for which they are to be used in the first place. The problem with "place" is that it is most useful at its most precise, granular scale [15, 23]. Yet with increasing spatial precision and accuracy comes a corresponding increase in the risk of identification, and therefore a breach of privacy [15]. This becomes particularly troublesome when the spatial data is linked to health, social or demographic data. The development of methods by which to mitigate these risks continues to be an active area of research, but thus far, proposed solutions have limitations, risks and tradeoffs, and lack guidelines on their appropriate use. Consequently, the acquisition of geographic data tends to be either limited, or at a sub-optimal or unusable scale. Not only do privacy issues impact data acquisition and use for analysis, but also visualisation and dissemination of the results. Researchers have been able to "reverse engineer" maps, for example, to successfully re-identify individuals [27–29].

While the debate between the fields of privacy and public health has raged on for decades [5] despite their interdependence on one another [14], tension continues to rise in concert with the rampant growth of information technology and e-Health. From a health research perspective, both Canada and the UK place strong emphasis on evidence-based public health policies and services [6], yet in both countries, this seems to be hampered by privacy issues. While some argue that this debate is the product of a lack of understanding of the legislation and regulations by the public health community [14, 30, 31], there is little in the way of formal collection and synthesis of the corresponding views and perspectives of those directly involved in public health activities. This paper describes the views and requirements of public health professionals in Canada and the UK on privacy issues and spatial data, as collected through a web-based survey. Given that Canada's health care and public health systems were both largely modeled after those of the UK [6, 32, 33], that each continues to be studied by the other for improvements and lessons learned [6, 34], and that privacy issues for public health have been cited in both, it is expected that survey responses in the two countries will also be similar.

Methods

Development & Content

The survey was first developed on paper in the summer of 2006, and piloted with select public health individuals in Canada and the UK. It was then submitted for privacy assessment by the Access to Information and Privacy Branch of Health Canada, and for ethics review and approval from the Health Canada Research Ethics Board and the Southwest Multicentre Research Ethics Committee in the UK. Throughout the process it was clear that the survey would be developed as a closed web-based survey, running between November 2006 and January 2007. The final paper versions of the survey are provided (see Additional files 1, 2, 3) and can also be found on the research website [35].

The paper survey was then converted to a web-version by the ALPHA Project [36] team at the Public Health Agency of Canada (PHAC), and piloted by the author and several colleagues within the PHAC. The survey launch was delayed by two weeks, with only some of the concerns identified during the pilot being implemented due to limitations of the ALPHA architecture. Issues and limitations with the design of the web-based survey are addressed in a later section.

Three versions of the survey were developed and launched: Canada-English, Canada-French and UK-English. A summary of the survey's structure and contents is given in Table 1.

Table 1 Sections of the survey
Full size table

Target

The survey targeted government, non-government and academic GIS labs and research groups involved in public health, as well as public health units (Canada), ministries, and observatories (UK). Potential participants were identified through web searches of public health sites, mailing databases, personal contact, referrals/word of mouth, and postings on the research website [35], a PHAC Public Health Portal website [37], and the NHS Public Health Informatics Community website [38].

Participation

Potential participants were invited to participate through a standardised but personally addressed email outlining the reason for the invite, the mechanisms by which their contact information was retrieved, a brief summary of the research and survey, a description of the data handling methods, an estimate of the time it would take to complete the survey (approximately 20 minutes), a unique user ID and password, the URL to the survey site, the URL to the research website, and the principle investigator's contact information.

The survey website had no other content. In order to participate, invitees were required to (1) successfully log in, and (2) consent to participation. Only the most recent responses for any given user ID were collected, ensuring only one survey was completed per participant. The consent screen outlined the voluntary and anonymous nature of the survey, indicated the approximate time it would take to complete the survey, the risks and benefits to the participants, the intellectual property and ownership of all data collected, and the protection of any personal data provided under Canadian and UK law. Failure to successfully complete either of these two requirements resulted in termination of the survey. After consenting, participants were given the option to select their country and language of choice, and the relevant survey then commenced.

All questions included a "Skip" option. Progress through the survey required the selection of a response for each question, and participants could terminate the survey at any time or complete it over multiple sessions, at their convenience. Questions were not randomized or alternated, but adaptive questioning was utilized. Question types varied, and included single-choice, multiple-choice, scale, and free-form response questions, thereby collecting both quantitative and qualitative responses. There was typically only one question per screen with multiple potential responses, the maximum number of which was 17. Depending on the responses of the participants, the survey was distributed over approximately 40 screens.

Key questions addressed by the survey included the following:

- Is there a requirement for personally identifiable data, including spatial data?

- What spatial resolution is ideal for public health research?

- Is privacy perceived to be a significant obstacle to public health practice?

- How knowledgeable do public health professionals consider themselves on privacy?

- What is the most critical obstacle to the access and use of personally identifiable data?

- What are the views of the public health community on public awareness and perceptions?

- Which is preferred: raw, case-level data, or aggregated, anonymised data?

Collected responses were analysed using basic descriptive statistics and non-parametric methods in SAS 9.2. The Checklist for Reporting Results of Internet E-Surveys (CHERRIES) [39] was used as a guideline in the reporting of the web-based survey methodology.

Results

Of 112 invitees in Canada and 75 in the UK, 66 (59%) and 28 (37%) participated in the survey, respectively. Of the Canadian participants, three responded to the French version. The completion proportion for Canada was 91%, and 86% for the UK.

There were no differences in the distribution of roles reported by participants in both countries, with most participants (49% in Canada; 64% in the UK) identifying their main role as falling within the research and analysis domain (Table 2). Participant expertise varied, and included aboriginal health (Canada only), chronic diseases, paediatric public health, infectious diseases, dental public health, emergency preparedness and response, environmental public health, ethics and public health law, food and nutrition, health services, injuries and disabilities, mental health and substance misuse, social determinants of health, surveillance, and education.

Table 2 Number and percent of survey participants by main role and geographical scope
Full size table

No response differences were observed between the two countries on each of the key questions, and the overall, combined results are therefore reported. A summary of the findings is given in Table 3.

Table 3 Summary of findings
Full size table

Is there a requirement for personally identifiable data, including spatial data?

Almost all participants identified a need for personally identifiable data (PID) in their roles; only one Canadian participant indicated no need for PID. Five Canadian participants and one UK participant chose not to answer the question. In total 93% of participants indicated a requirement for PID in their public health activities.

What spatial resolution is ideal for public health research?

All participants identified geographic location of health data as a requirement for their roles or organisation. When asked "...what level of geography would you ideally like to visualise your data and/or conduct spatial analyses," 69% of respondents identified "latitude and longitude, exact street address, or exact household."

Is privacy perceived to be a significant obstacle to public health practice? AND How knowledgeable do public health professionals consider themselves on privacy?

When asked "Are you or have you been restricted in your use of GIS for any public health activity because of privacy concerns (i.e. map or data might identify an individual or community)?" 79% of respondents marked "YES".

Of 83 participants who responded to the question "In your opinion, do current restrictions to PID pose an obstacle to any aspects of public health practice?" 59 (71%) agreed, rating the obstacle severity at 6 or higher. Of these 59, 36 (61%) rated their knowledge of privacy and confidentiality issues/legislation at 6 out of 10 or higher, with a mean score of 7.5 (std = 1.0) and a median score of 7.

Using the median, respondents with a self-rated knowledge score lower than 7 were classified as "low" on knowledge (47%), while those at or above the median score were classified as "high" (53%). Those classified as high were more likely to rate privacy as an obstacle (one-sided Wilcoxon exact P < 0.001). A trend was evident for the overall correlation between restriction score and self-rated privacy knowledge score (Spearman r = 0.22, P = 0.057).

What is the most critical obstacle to the access and use of personally identifiable data?

The most common obstacles were reported as bureaucracy and legislation by 33% and 25% of the participants, respectively. Other responses included public disapproval/paranoia (15%), practitioner paranoia (7%), lack of knowledge (6%), combination of these factors (4%), other (2%), and none (skipped question, 7%).

What are the views of the public health community on public awareness and perceptions?

Fifty seven percent of participants felt that under 10% of the public population is aware of the impact of restricted access to PID on public health practice; 74% felt it to be under 20%, and 84% felt the proportion to be less than 30% (cumulative frequencies). Most identified education and awareness (through media, reports, case studies, scenarios, etc) as the best methods to increase this proportion. When then asked what proportion of the public they felt would allow the use of their PID if they were educated on the usefulness of such data to public health practice, 67% said 50% or higher.

Which is preferred: raw, case-level data, or aggregated, anonymised data?

More respondents identified a preference for having access to granular-level rather than aggregate data (53 vs. 27; 66% of those responding to this question).

Discussion

This survey and user-needs assessment on privacy and public health shows a definite requirement by public health professionals – in various fields and positions in both Canada and the UK – for personally identifiable data, including spatial data. The requirement for this spatial data is at its most granular level – latitude and longitude, or exact street address – which necessarily compromises patient privacy. It is not surprising, therefore, that public health professionals perceive privacy to be a significant obstacle to public health practice.

There are those who would argue that this perception is the product of a lack of understanding of the legislation and regulations by the public health community. The results of this research, however, indicate the contrary. Not only did public health professionals in both countries generally rate themselves high on knowledge of privacy legislation and related issues, but those with the highest self-rated scores also tended to rate privacy as more of an obstacle. That these self-ratings of knowledge are not representative of actual knowledge remains possible.

Participants perceived the most critical obstacles to sharing or acquisition of health data with PID to be bureaucracy, followed by legislation.

Bureaucracy surrounding health research in both Canada and the UK generally revolves around data ownership, academic competitiveness, ethics review boards or committees, and in particular, requirements for informed consent, even if they compromise public health, or are not in the best interests of the patients involved [40–42]. Since seeking subject consent with every new hypothesis to be tested or model to be developed is an impossible task, some have suggested that thought be given to "blanket" consent. At the Canadian Institutes for Health Research (CIHI) 2003 workshop on the legal and ethical issues facing the Canadian Lifelong Health Initiative [43], participants spent some time discussing such issues, only to emphasise the importance of the establishment of ethical governance and structure; essentially, more necessary bureaucracy. Interestingly, while the debate continues, a relatively recent survey found that most of the British public did not consider the use of their National Cancer Registry PID for public health research and surveillance to be an invasion of their privacy [30]. While the ethics of blanket consent are not discussed in this study, it is nonetheless offered as a potential solution in light of the requirements of the public health community. This does not, however, address other issues of data ownership and control that contribute to the bureaucratic debate.

While many individuals recognised the importance of privacy legislation, participants generally indicated a concern and, in some cases, first-hand frustration that legislation unduly restricts public health activities, compromising surveillance and research. Many phrases were used by respondents to describe the implications of privacy legislation on public health, including, among others: "increasingly restrictive;" "serious;" "incomplete;" "fuzzy;" "does more harm than good;" "two-edged sword;" "causes challenges;" "delays and restricts access [to data];" " [is a] hindrance to the improvement and efficiency of public health;" "disappointing;" "frustrating;" "difficult to interpret;" "very worrisome;" "disadvantages the public interest;" "not properly understood;" "over-protective;" "limiting;" "hinders knowledge;" and "used as an excuse not to share data." A large proportion of the public health community represented in this sample clearly expressed major concerns with the impact of privacy legislation on their work – both in Canada, and in the UK – in spite of having a good understanding and acceptance of its purpose and necessity. It is also important for legislation to be written in an unambiguous manner that is clearly understood by both public health professionals and the general public [4].

Public health professionals are largely of the opinion that the general public's level of awareness of the impact of restricted access to PID on public health practice is extremely low. Surveys by the Office of the Privacy Commissioner in Canada [44] repeatedly show that the majority of Canadians surveyed (up to 80%) place an extremely high level of importance on strong laws to protect personal information, particularly health information, and that they feel that the level of protection of their personal information has declined over the past ten years. Yet interestingly, only 20% are clearly aware of existing laws, and even fewer (12%) are aware of their rights around the collection, use and disclosure of this information. The "need to raise Canadians' awareness about the current laws in place and what their rights are" [44] must therefore be coupled with the corresponding need to address this from within the context of public health requirements.

Educating the public, therefore, as well as practitioners, data users, policy makers and politicians, was not surprisingly identified by participants as a potential solution. Participants put emphasis on the utilisation of the media to educate and increase awareness, as well as demonstrating the impact of a lack of data, and the benefits of its use when available. Demonstration of the benefits to the individual (e.g. streamlining of the system, not being asked for personal information with every visit to a new clinician, improved dissemination of public health information and intelligence directly to the public) was also offered as a solution, and summed up by one participant in the phrase "seeing is believing". It is worth noting, however, that a number of participants displayed a certain level of pessimism that until a crisis or extreme event occurs, no amount of education or awareness-increasing activities would make a difference.

Public health professionals generally prefer disaggregate, case-level data, but access to this data is an issue. The limitations imposed by privacy on public health have resulted in the development of a variety of techniques for data anonymisation [15, 23, 45]. However, all unavoidably have their issues, risks and limitations, and there is currently no framework to guide public health professionals in their appropriate use and interpretation.

Generalisability

Although the findings of this paper may be generalisable to public health professionals in Canada and the UK, issues of privacy and public health are not unique to these countries. Privacy is defined as a fundamental human right in the legislation of many countries, and the concept is enshrined in Article 12 of the United Nations' Universal Declaration of Human Rights [46] and Article 8 of the European Convention on Human Rights [47]. Similarly, public health is an international discipline; both diseases and information are ubiquitous, and neither is constrained by political boundaries and oceans. The increasing requirement for spatial data and its inherent clash with privacy legislation therefore extend beyond the UK and Canadian contexts, and the results, requirements and conclusions drawn from this research can be generalised to wherever such a clash exists. The implementation of solutions by national governments may be further exacerbated by issues of social political trust. General public distrust in government initiatives and motives, such as in most countries of the European Union, Canada, and the United States [48, 49], complicates changes that may be perceived by the public to be intrusions of privacy. Such issues may currently be less of a concern in countries such as Finland, Sweden, Denmark, and the Netherlands, where social political trust, though declining, has traditionally tended to be much higher [50–53]. However, even in such nations where privacy and health have traditionally not clashed, increased international data sharing requirements and spatial data implications may pose unanticipated and challenging obstacles.

Limitations

No comprehensive lists of public health and health GIS professionals were found in either country, so it was not possible to invite a random sample. In addition, the response rate in the UK was relatively low, and it is therefore uncertain that the sample is representative of all public health professionals in the two countries. However, responses between the two countries were consistent, with no significant differences.

Since knowledge of privacy legislation and policies was based on self-rated scores, a thorough review and assessment of privacy legislation as it pertains to public health practice is required in both Canada and the UK to validate the findings of this survey.

A number of limitations and issues pertaining to the web-survey were identified. Most notable of these was the presence of a scroll bar in sections II and III which most participants missed, thereby eliminating the ability to capture items in reference to "place", such as usefulness. However, these items were also captured more broadly in other sections of the survey. Other issues involved the inability of the architecture to support various designs and types of questions that would have facilitated the completion of the survey, and shortened the length of time required. Participants also noted frustration with the navigation and structure of the survey pages. A document outlining these issues and others was submitted to the ALPHA team after the initial pilot for future enhancements to the architecture.

Conclusion

It is clear that privacy is perceived to be a major obstacle and issue for public health – the literature illustrates it, and the current study provides both quantitative and qualitative evidence. Together, these provide a more holistic portrayal of public health community viewpoints, and can be used to educate the public, and as evidence for decision makers to implement changes in policies and legislation. The clash between a requirement for personally identifiable data – including exact, individual location – by public health professionals, and the limitations imposed by privacy and its associated bureaucracy, must be addressed and appropriate solutions developed, particularly given the increasing utilisation of geographic information systems in public health and the imminent completion of comprehensive electronic health systems. Privacy legislation is critical for the protection of this fundamental human right, and to prevent the abuse of personal information, particularly in the health field. However, the legislation must be harmonised with the requirements of public health practice if the health of societies and populations is to be maintained and improved. Since health is not limited by political boundaries, this must be pursued at an international level, and solutions must address these perceptions in the public health community, simplify the bureaucratic process, promote multidisciplinary discussions between legislators, bureaucrats and the public health community, educate communities, and develop and provide public health professionals with toolsets, algorithms and guidelines for using and reporting on disaggregate data. While the results of this study should inform and justify the development of techniques that better anonymise health data with minimal impact on its integrity and frameworks for implementing them, it seems fitting to echo the warning of Curtis et al: "...health and spatial scientists should be proactive and suggest a series of point level spatial confidentiality guidelines before governmental decisions are made which may be reactionary toward the threat of revealing confidential information, thereby imposing draconian limits on research using a GIS [27]."

References

  1. Last JM: A dictionary of public health. Edited by: Last JM. 2007, New York, Oxford University Press, Inc.

    Google Scholar 

  2. Last JM: A dictionary of epidemiology. Edited by: Spasoff RA, Harris SS and Thuriaux MC. 2001, New York, Oxford University Press, Inc., Fourth

    Google Scholar 

  3. National Library of Medicine - Medical Subject Headings. 2007, National Institutes of Health, [http://www.nlm.nih.gov/cgi/mesh/2007/MB_cgi?mode=&index=21704&field=all&HM=&II=&PA=&form=&input=]

  4. Boulos MNK: Towards evidence-based, GIS-driven national spatial health information infrastructure and surveillance services in the United Kingdom. International Journal of Health Geographics. 2004, 3: 1-10.1186/1476-072X-3-1. [http://www.ij-healthgeographics.com/content/3/1/1]

    Article  PubMed  PubMed Central  Google Scholar 

  5. Warren SD, Brandeis LD: The right to privacy. Harvard Law Review. 1890, 4: 193-220. 10.2307/1321160.

    Article  Google Scholar 

  6. Naylor D, Basrur SH, Bergeron MG, Brunham RC, Butler-Jones D, Dafoe G, Ferguson-Paré M, Lussing F, McGeer A, Neufeld KR, Plummer F: Learning from SARS: renewal of public health in Canada. A report of the National Advisory Committee on SARS and Public Health. 2003, Ottawa, Ontario, Canada, Health Canada, Publication Number: 1210:

    Google Scholar 

  7. Hulton L, Brandon G, McAlister S, Sage J: Better local information. From breastfeeding to badgers - Brighton & Hove's one stop interactive statistics and mapping service. 2004, United Kingdom, South East England Public Health Observatory, NHS, [http://www.citystats.org]

    Google Scholar 

  8. Robinson B: Privacy, funding doubts shutter Calif. RHIO. 2007, [http://www.govhealthit.com/online/news/97855-1.html]

    Google Scholar 

  9. E-Health Insider: Researchers underline need for access to records. 2007, [http://www.e-health-insider.com/news/2766/resarchers_underline_need_for_access_to_records]

  10. Munro M: Our privacy rules 'block health research': Important studies held back, scientist says. The Vancouver Sun. 2004, A5-

    Google Scholar 

  11. Khamsi R: Strict data protection may stifle health research. NewScientist.com. 2006, [http://www.newscientist.com/article/dn8595.html]

  12. Annas GJ: Book Review: Is privacy the enemy of public health. Health Affairs. 1999, 18: 197-198. 10.1377/hlthaff.18.4.197.

    Article  PubMed  Google Scholar 

  13. Bayer R, Colgrove J: Public health vs. civil liberties. Science. 2002, 297: 1811-10.1126/science.1074274. [http://www.sciencemag.org]

    Article  CAS  PubMed  Google Scholar 

  14. Law in Public Health Practice. Edited by: Hoffman RE, Lopez W, Matthews GW, Rothstein MA and Foster KL. 2007, New York, Oxford University Press, Second

    Google Scholar 

  15. Council NR: Panel on confidentiality issues arising from the integration of remotely sensed and self-identifying data. Putting people on the map: protecting confidentiality with linked social-spatial data. 2007, Washington, DC, The National Academies Press, Gutmann MP and Stern PC, Education CD

    Google Scholar 

  16. Health and Social Care Act 2001. 2001, c. 15 (UK), [http://www.opsi.gov.uk/acts/acts2001/ukpga_20010015_en_1]

  17. The Privacy Act R.S. 1985, c. P-21 (Canada), [http://laws.justice.gc.ca/en/P-21/section-[section-no].html]

  18. Personal Information Protection and Electronic Documents Act. 2000, c. 5 P-8.6 (Canada), [http://laws.justice.gc.ca/en/P-8.6/section-[section-no].html]

  19. Data Protection Act 1998. 1998, c. 29 (UK), [http://www.opsi.gov.uk/ACTS/acts1998/19980029.htm]

  20. Directive 95/46/EC of the European Parliament and of the council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. 1995, 0031-0050. OJL 281, [http://europa.eu.int/eur-lex/lex/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:EN:HTML]

  21. POST: Data protection & medical research. 2005, POSTnote 235

    Google Scholar 

  22. Pickle LW, Szczur M, Lewis DR, Stinchcomb DG: The crossroads of GIS and health information: a workshop on developing a research agenda to improve cancer control. International Journal of Health Geographics. 2006, 5: [http://www.ij-healthgeographics.com/content/5/1/51]

    Google Scholar 

  23. Boulos MNK, Cai Q, Padget JA, Rushton G: Using software agents to preserve individual health data confidentiality in micro-scale geographical analyses. Journal of Biomedical Informatics. 2006, 39: 160-170. 10.1016/j.jbi.2005.06.003.

    Article  Google Scholar 

  24. Jeffery C, Ozonoff A, Forsberg L, Nuño M, Pagano M: The cost of obfuscation when reporting locations of cases in syndromic surveillance systems. Advances in Disease Surveillance. 2006, 1: 36-

    Google Scholar 

  25. Olson KL, Grannis SJ, Mandl KD: Privacy protection versus cluster detection in spatial epidemiology. American Journal of Public Health. 2006, 96: 2002-2008. 10.2105/AJPH.2005.069526.

    Article  PubMed  PubMed Central  Google Scholar 

  26. Mei-Po K, Casas I, Schmitz BC: Protection of geoprivacy and accuracy of spatial information: how effective are geographical masks?. Cartographica. 2004, 39: 15-28.

    Google Scholar 

  27. Curtis AJ, Mills JW, Leitner M: Spatial Confidentiality and GIS: re-engineering mortality locations from published maps abut Hurricane Katrina. Int J Health Geogr. 2006, 5: 44-10.1186/1476-072X-5-44.

    Article  PubMed  PubMed Central  Google Scholar 

  28. Brownstein JS, Cassa CA, Kohane IS, Mandl KD: An unsupervised classification method for inferring original case locations from low-resolution disease maps. International Journal of Health Geographics. 2006, 5:

    Google Scholar 

  29. Brownstein JS, Cassa CA, Mandl KD: No Place to Hide — Reverse Identification of Patients from Published Maps. New England Journal of Medicine. 2006, 355: 1741-1742. 10.1056/NEJMc061891.

    Article  CAS  PubMed  Google Scholar 

  30. Barrett G, Cassell JA, Peacock JL, Coleman MP: National survey of British public's views on use of identifiable medical data by the National Cancer Registry. British Medical Journal. 2006, 332: 1068-1072. 10.1136/bmj.38805.473738.7C.

    Article  PubMed  PubMed Central  Google Scholar 

  31. Fact Sheet: The Privacy Act: Not an excuse to promote secrecy. 2006, Office of the Privacy Commissioner of Canada, [http://www.privcom.gc.ca/fs-fi/02_05_d_29_e.asp]

  32. Marchildon GP: Health Systems in Transition - Canada. Edited by: Allin S, Mossialos E. 2005, World Health Organization, 7 (3): [http://www.euro.who.int/document/e87954.pdf]

    Google Scholar 

  33. Esmail N: The black hole that is Canada's medicare. Times Colonist. 2005, [http://www.fraserinstitute.org/Commerce.web/article_details.aspx?pubID=3526]

    Google Scholar 

  34. Irvine B, Ferguson S, Cackett B: Background briefing: the Canadian health care system. 2005, Centre for the New Europe, [http://www.cne.org/pub_pdf/2002_08_health_care_in_canada.pdf]

    Google Scholar 

  35. PersonPlaceTime.org. 2008, [http://www.personplacetime.org]

  36. Turner C, Bishay H, Peng B, Merifield A: The ALPHA project: an architecture for leveraging public health applications. International Journal of Medical Informatics. 2006, 75: 741-754. 10.1016/j.ijmedinf.2005.10.006.

    Article  PubMed  Google Scholar 

  37. NHS: NHS Health Informatics Community. 2007, [http://www.espace.connectingforhealth.nhs.uk/]

    Google Scholar 

  38. The Map & Data Exchange (Public Health Agency of Canada). 2007, [https://php-psp.phac-aspc.gc.ca]

  39. Eysenbach G: Improving the quality of web surveys: the checklist for reporting results of internet e-surveys (CHERRIES). Journal of Medical Internet Research. 2004, 6 (3): e34-doi:10.2196/jmir.6.3.e34, [http://www.jmir.org/2004/3/e34]

    Article  PubMed  PubMed Central  Google Scholar 

  40. Souhami R: Governance of research that uses identifiable personal data. British Medical Journal. 2006, 333: 315-316. 10.1136/bmj.333.7563.315.

    Article  PubMed  PubMed Central  Google Scholar 

  41. Singleton P, Wadsworth M: Consent for the use of personal medical data in research. British Medical Journal. 2006, 333: 255-258. 10.1136/bmj.333.7561.255.

    Article  PubMed  PubMed Central  Google Scholar 

  42. Hewison J, Haines A: Overcoming barriers to recruitment in health research. British Medical Journal. 2006, 333: 300-302. 10.1136/bmj.333.7562.300.

    Article  PubMed  PubMed Central  Google Scholar 

  43. Canadian Institutes of Health Research. 2007, [http://www.cihr-irsc.gc.ca/e/23019.html]

  44. Canadians and the privacy landscape. 2007, Office of the Privacy Commissioner of Canada, [http://www.privcom.gc.ca/information/survey/2007/ekos_2007_02_e.asp]

  45. Cassa CA, Grannis SJ, Overhage JM, Mandl KD: A context-sensitive approach to anonymizing spatial surveillance data: impact on outbreak detection. J Am Med Inform Assoc. 2006, 13 (2): 160-165. 10.1197/jamia.M1920.

    Article  PubMed  PubMed Central  Google Scholar 

  46. Universal Declaration of Human Rights. 1948, United Nations General Assembly, Res. 217 A (III), [http://www.un.org/Overview/rights.html]

  47. Convention for the Protection of Human Rights and Fundamental Freedoms. 1950, Council of Europe, C.E.T.S No. 005, [http://conventions.coe.int/Treaty/en/Treaties/Html/005.htm]

  48. Sims H: Public confidence in government, and government service delivery. 2001, Canadian Centre for Management Development, Report # P105B, [http://www.csps-efpc.gc.ca/Research/publications/pdfs/HarveySimms_e.pdf]

    Google Scholar 

  49. Nye JSJ: In government we don't trust. Foreign Policy. 1997, 99-111. 10.2307/1149092. [http://www.foreignpolicy.com/Ning/archive/archive/108/ingovwedonttrust.pdf]

    Google Scholar 

  50. Green JM, Draper AK, Dowler EA, Fele G, Hagenhoff V, Rusanen M, Rusanen T: Public understanding of food risks in four European countries: a qualitative study. European Journal of Public Health. 2005, 15: 523-527. 10.1093/eurpub/cki016.

    Article  PubMed  Google Scholar 

  51. Newton K: Political support: social capital, civil society and political and economic performance. Political Studies. 2006, 54: 846-864. 10.1111/j.1467-9248.2006.00634.x.

    Article  Google Scholar 

  52. Dalton RJ: The social transformation of trust in government. International Review of Sociology. 2005, 15: 133-154. 10.1080/03906700500038819.

    Article  Google Scholar 

  53. Hudson J: Institutional trust and subjective well-being across the EU. Kyklos. 2006, 59: 43-62. 10.1111/j.1467-6435.2006.00319.x.

    Article  Google Scholar 

  54. Geography at the University of Iowa - Gerard Rushton. 2008, [http://www.uiowa.edu/~geog/faculty/rushton.htm]

  55. University of Helsinki - Department of Geography - Markku Löytönen. 2008, [http://www.helsinki.fi/geography/Markku_Loytonen_eng.html]

  56. The 19th IUHPE World Conference on Health Promotion & Health Education. 2008, [http://www.iuhpeconference.org/en/conference/abstract_view.php?ID=329688]

Pre-publication history

Download references

Acknowledgements

This research was funded and supported by the Office of Public Health Practice, the Public Health Agency of Canada. Many thanks to Professors Gerard Rushton [54] and Markku Löytönen [55] for providing insightful comments on the survey during the piloting phase. An early and much less detailed report on this study was presented at the 19th Annual IUHPE World Conference on Health Promotion and Health Education, held in Vancouver, British Columbia, Canada, June 10–15, 2007 [56].

Author information

Authors and Affiliations

  1. Faculty of Health and Social Work, University of Plymouth, Centre Court, 73 Exeter Street, Drake Circus, Plymouth, Devon, PL4 8AA, UK

    Philip AbdelMalik, Maged N Kamel Boulos & Ray Jones

  2. Office of Public Health Practice, Public Health Agency of Canada, 120 Colonnade Road, AL6702A, Ottawa, Ontario, K1A 0K9, Canada

    Philip AbdelMalik

Authors
  1. Philip AbdelMalik
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Maged N Kamel Boulos
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Ray Jones
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Philip AbdelMalik.

Additional information

Competing interests

PA is an epidemiologist working directly with Geographic Information Systems, and pursuing PhD research on issues of privacy and spatial health information. There are no other competing interests.

Authors' contributions

PA conceived, designed and carried out the survey (part of his PhD research at the Peninsula Postgraduate Health Institute, Plymouth, UK), and analysed the results. He also conducted the literature review and wrote the draft paper. MNKB and RJ reviewed and provided critical input to the study design and to the discussion and interpretation of its results and their implications. They also helped with the ethical approval process in the UK, identifying UK respondents, the literature review, and the revision of the draft paper. All authors have read and approved the final manuscript.

Electronic supplementary material

12889_2007_1126_MOESM1_ESM.pdf

Additional file 1: The impact of privacy on public health practice: Public health professional questionnaire, CANADA. This is the paper version of the Canadian-English survey that was adapted for the web to collect public health professional perspectives and requirements on location-privacy in Canada. (PDF 308 KB)

12889_2007_1126_MOESM2_ESM.pdf

Additional file 2: L'impact de la protection des renseignements personnels sur la pratique en santé publique, CANADA. This is the paper version of the Canadian-French survey that was adapted for the web to collect public health professional perspectives and requirements on location-privacy in Canada. (PDF 336 KB)

12889_2007_1126_MOESM3_ESM.pdf

Additional file 3: The impact of privacy on public health practice: Public health professional questionnaire, UNITED KINGDOM. This is the paper version of the UK survey that was adapted for the web to collect public health professional perspectives and requirements on location-privacy in Canada. (PDF 308 KB)

Rights and permissions

This article is published under license to BioMed Central Ltd. This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/2.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

Reprints and Permissions

About this article

Cite this article

AbdelMalik, P., Boulos, M.N.K. & Jones, R. The perceived impact of location privacy: A web-based survey of public health perspectives and requirements in the UK and Canada. BMC Public Health 8, 156 (2008). https://doi.org/10.1186/1471-2458-8-156

Download citation

  • Received:

  • Accepted:

  • Published:

  • DOI: https://doi.org/10.1186/1471-2458-8-156

Keywords

  • Geographic Information System
  • Privacy Issue
  • Public Health Professional
  • Public Health Practice
  • Public Health Activity

BMC Public Health

ISSN: 1471-2458

Contact us