Hippocratic Databases Demonstration

1. Hippocratic Databases Demonstration Intelligent Information Systems Group IBM Almaden Research Center

2. The screenshots slides in this presentation are taken from a live working demo of the Hippocratic Database technology. Please refer to slide notes for explanations.

3. User Preferences & Data Collection Application Data Retrieval Privacy Policy Creation Negotiation User Preferences & Policy Matching Installation EPAL Policy Parser Privacy Enforcement JDBC Driver DATABASE Installed Policy User Data Hippocratic Databases

4. Hippocratic Databases NetCare Healthcare Business Scenario • John Cane, Chief Privacy Officer, NetCare Healthcare • Jane Smith, New Patient, NetCare Healthcare • Dr. Young, Physician, NetCare Healthcare • Christine Jones, Lab Technician, NetCare Healthcare • Phil Crew, Drug Researcher, Innovative Drug Research

5. Jane submits her personal information Jane visits NetCare’s website to setup patient account Jane, a new patient, defines her privacy preferences John Cane, CPO installs corporate privacy policy Installation Negotiation - Name, Address, SSN#, Email - Opt-in to sharing data for research - Opt-out of sharing full medical records to lab technicians Corporate Policy Hippocratic Databases NetCare Healthcare Business Scenario DATABASE Jane’s Data (Personal/Medical Records)

6. This is the main page of NetCare Healthcare’s website.

7. John Cane, Chief Privacy Officer, NetCare Healthcare John will install NetCare’s corporate privacy policy, which he wrote.

8. John Cane, Chief Privacy Officer of NetCare, logs in to install privacy policy.

9. Let’s first view the text version of the NetCare’s privacy policy.

11. Now let’s view the XML format of the same privacy policy to be installed.

12. NetCare’s privacy policy is saved into the database to be used for systematic privacy enforcement.

13. Jane Smith, New Prospective Patient, NetCare Healthcare Jane will first define her own privacy preferences. Then she later creates a new patient account with NetCare Healthcare.

14. Jane specifies her own privacy preferences for her sensitive information. Jane specifies her own privacy preferences

15. Jane selects her privacy preference by selecting the medium level of privacy protection.

16. Jane proceeds to create a new patient account.

17. The matching process reveals that one of Jane’s privacy preferences conflicts with NetCare’s corporate privacy policy.

18. Jane decides to review her privacy preferences. Jane modifies her preferences

19. Jane now selects the setting for the low level of privacy, removing the preference that was previously in conflict.

20. Jane now creates her patient account and selects to share her medical information for research but not for lab work.

21. Jane’s patient account is created. Her personal information and privacy choices are saved to the database.

22. Christine Jones, Lab Technician Three months later, Jane’s visits the doctor who prescribes a lab exam for Jane. When Jane goes to lab exam room, Christine, the lab technician, retrieves Jane’s patient information from the database.

23. Christine Jones, the lab technician logs in from the main website.

24. Let’s demonstrate Christine’s data retrieval for Jane’s record WITHOUT Hippocratic Database privacy enforcement.

25. WITHOUT the Hippocratic Database privacy enforcement, Jane’s entire record appears. This does not respect her privacy choices.

26. Now let’s demonstrate Christine’s data retrieval for Jane’s record WITH Hippocratic Database privacy enforcement.

27. Now WITH the Hippocratic Database privacy enforcement, only the relevant data for the lab technician and for the purpose of lab work appears.

28. Phil Crew, Drug Researcher, Innovative Drug Research Phil will retrieve patient records from the database to find those people who may benefit from the company’s drug research.

29. Phil Crew, the drug researcher, logs in to retrieve data from the database.

30. Let’s demonstrate Phil’s data retrieval for all patient records WITHOUT Hippocratic Database privacy enforcement.

31. WITHOUT the Hippocratic Database privacy enforcement, full patient records for all patients appear without respecting privacy preferences or the corporate privacy policy.

32. Let’s demonstrate Phil’s data retrieval for all patient records WITH Hippocratic Database privacy enforcement.

33. Now WITH the Hippocratic Database privacy enforcement, only the data of those who agreed to share information for drug research purposes appears. Also, privacy enforcement is performed at a granular, cell level.