An overview of human genetic privacy

Assessing Privacy Vulnerabilities in Genetic Data Sets: Scoping Review

BACKGROUND

Genetic data are widely considered inherently identifiable. However, genetic data sets come in many shapes and sizes, and the feasibility of privacy attacks depends on their specific content. Assessing the reidentification risk of genetic data is complex, yet there is a lack of guidelines or recommendations that support data processors in performing such an evaluation.

OBJECTIVE

This study aims to gain a comprehensive understanding of the privacy vulnerabilities of genetic data and create a summary that can guide data processors in assessing the privacy risk of genetic data sets.

METHODS

We conducted a 2-step search, in which we first identified 21 reviews published between 2017 and 2023 on the topic of genomic privacy and then analyzed all references cited in the reviews (n=1645) to identify 42 unique original research studies that demonstrate a privacy attack on genetic data. We then evaluated the type and components of genetic data exploited for these attacks as well as the effort and resources needed for their implementation and their probability of success.

RESULTS

From our literature review, we derived 9 nonmutually exclusive features of genetic data that are both inherent to any genetic data set and informative about privacy risk: biological modality, experimental assay, data format or level of processing, germline versus somatic variation content, content of single nucleotide polymorphisms, short tandem repeats, aggregated sample measures, structural variants, and rare single nucleotide variants.

CONCLUSIONS

On the basis of our literature review, the evaluation of these 9 features covers the great majority of privacy-critical aspects of genetic data and thus provides a foundation and guidance for assessing genetic data risk.

Balancing the safeguarding of privacy and data sharing: perceptions of genomic professionals on patient genomic data ownership in Australia

There are inherent complexities and tensions in achieving a responsible balance between safeguarding patients' privacy and sharing genomic data for advancing health and medical science. A growing body of literature suggests establishing patient genomic data ownership, enabled by blockchain technology, as one approach for managing these priorities. We conducted an online survey, applying a mixed methods approach to collect quantitative (using scale questions) and qualitative data (using open-ended questions). We explored the views of 117 genomic professionals (clinical geneticists, genetic counsellors, bioinformaticians, and researchers) towards patient data ownership in Australia. Data analysis revealed most professionals agreed that patients have rights to data ownership. However, there is a need for a clearer understanding of the nature and implications of data ownership in this context as genomic data often is subject to collective ownership (e.g., with family members and laboratories). This research finds that while the majority of genomic professionals acknowledge the desire for patient data ownership, bioinformaticians and researchers expressed more favourable views than clinical geneticists and genetic counsellors, suggesting that their views on this issue may be shaped by how closely they interact with patients as part of their professional duties. This research also confirms that stronger health system infrastructure is a prerequisite for enabling patient data ownership, which needs to be underpinned by appropriate digital infrastructure (e.g., central vs. decentralised data storage), patient identity ownership (e.g., limited vs. self-sovereign identity), and policy at both federal and state levels.

An Overview of Deep Generative Models in Functional and Evolutionary Genomics

Following the widespread use of deep learning for genomics, deep generative modeling is also becoming a viable methodology for the broad field. Deep generative models (DGMs) can learn the complex structure of genomic data and allow researchers to generate novel genomic instances that retain the real characteristics of the original dataset. Aside from data generation, DGMs can also be used for dimensionality reduction by mapping the data space to a latent space, as well as for prediction tasks via exploitation of this learned mapping or supervised/semi-supervised DGM designs. In this review, we briefly introduce generative modeling and two currently prevailing architectures, we present conceptual applications along with notable examples in functional and evolutionary genomics, and we provide our perspective on potential challenges and future directions.

Storing paediatric genomic data for sequential interrogation across the lifespan

Genomic sequencing (GS) is increasingly used in paediatric medicine to aid in screening, research and treatment. Some health systems are trialling GS as a first-line test in newborn screening programmes. Questions about what to do with genomic data after it has been generated are becoming more pertinent. While other research has outlined the ethical reasons for storing deidentified genomic data to be used in research, the ethical case for storing data for future clinical use has not been explicated. In this paper, we examine the ethical case for storing genomic data with the intention of using it as a lifetime health resource. In this model, genomic data would be stored with the intention of reanalysis at certain points through one's life. We argue this could benefit individuals and create an important public resource. However, several ethical challenges must first be met to achieve these benefits. We explore issues related to privacy, consent, justice and equality. We conclude by arguing that health systems should be moving towards futures that allow for the sequential interrogation of genomic data throughout the lifespan.

Sociotechnical safeguards for genomic data privacy

Recent developments in a variety of sectors, including health care, research and the direct-to-consumer industry, have led to a dramatic increase in the amount of genomic data that are collected, used and shared. This state of affairs raises new and challenging concerns for personal privacy, both legally and technically. This Review appraises existing and emerging threats to genomic data privacy and discusses how well current legal frameworks and technical safeguards mitigate these concerns. It concludes with a discussion of remaining and emerging challenges and illustrates possible solutions that can balance protecting privacy and realizing the benefits that result from the sharing of genetic information.

AMAISE: a machine learning approach to index-free sequence enrichment

Metagenomics holds potential to improve clinical diagnostics of infectious diseases, but DNA from clinical specimens is often dominated by host-derived sequences. To address this, researchers employ host-depletion methods. Laboratory-based host-depletion methods, however, are costly in terms of time and effort, while computational host-depletion methods rely on memory-intensive reference index databases and struggle to accurately classify noisy sequence data. To solve these challenges, we propose an index-free tool, AMAISE (A Machine Learning Approach to Index-Free Sequence Enrichment). Applied to the task of separating host from microbial reads, AMAISE achieves over 98% accuracy. Applied prior to metagenomic classification, AMAISE results in a 14-18% decrease in memory usage compared to using metagenomic classification alone. Our results show that a reference-independent machine learning approach to host depletion allows for accurate and efficient sequence detection.

Genomic privacy, identity and dignity

Significant advancements towards a future of big data genomic medicine, associated with large-scale public dataset repositories, intensify dilemmas of genomic privacy. To resolve dilemmas adequately, we need to understand the relative force of the competing considerations that make them up. Attitudes towards genomic privacy are complex and not well understood; understanding is further complicated by the vague claim of 'genetic exceptionalism'. In this paper, we distinguish between consequentialist and non-consequentialist privacy interests: while the former are concerned with harms secondary to exposure, the latter represent the interest in a private sphere for its own sake, as an essential component of human dignity. Empirical studies of attitudes towards genomic privacy have almost never targeted specifically this important dignitary component of the privacy interest. In this paper we first articulate the question of a non-consequentialist genomic privacy interest, and then present results of an empirical study that probed people's attitudes towards that interest. This was done via comparison to other non-consequentialist privacy interests, which are more tangible and can be more easily assessed. Our results indicate that the non-consequentialist genomic privacy interest is rather weak. This insight can assist in adjudicating dilemmas involving genomic privacy.

Digital DNA lifecycle security and privacy: an overview

DNA sequencing technologies have advanced significantly in the last few years leading to advancements in biomedical research which has improved personalised medicine and the discovery of new treatments for diseases. Sequencing technology advancement has also reduced the cost of DNA sequencing, which has led to the rise of direct-to-consumer (DTC) sequencing, e.g. 23andme.com, ancestry.co.uk, etc. In the meantime, concerns have emerged over privacy and security in collecting, handling, analysing and sharing DNA and genomic data. DNA data are unique and can be used to identify individuals. Moreover, those data provide information on people's current disease status and disposition, e.g. mental health or susceptibility for developing cancer. DNA privacy violation does not only affect the owner but also affects their close consanguinity due to its hereditary nature. This article introduces and defines the term 'digital DNA life cycle' and presents an overview of privacy and security threats and their mitigation techniques for predigital DNA and throughout the digital DNA life cycle. It covers DNA sequencing hardware, software and DNA sequence pipeline in addition to common privacy attacks and their countermeasures when DNA digital data are stored, queried or shared. Likewise, the article examines DTC genomic sequencing privacy and security.

Genetic data sharing and artificial intelligence in the era of personalized medicine based on a cross-sectional analysis of the Saudi human genome program

The success of the Saudi Human Genome Program (SHGP), one of the top ten genomic programs worldwide, is highly dependent on the Saudi population embracing the concept of participating in genetic testing. However, genetic data sharing and artificial intelligence (AI) in genomics are critical public issues in medical care and scientific research. The present study was aimed to examine the awareness, knowledge, and attitude of the Saudi society towards the SHGP, the sharing and privacy of genetic data resulting from the SHGP, and the role of AI in genetic data analysis and regulations. Results of a questionnaire survey with 804 respondents revealed moderate awareness and attitude towards the SHGP and minimal knowledge regarding its benefits and applications. Respondents demonstrated a low level of knowledge regarding the privacy of genetic data. A generally positive attitude was found towards the outcomes of the SHGP and genetic data sharing for medical and scientific research. The highest level of knowledge was detected regarding AI use in genetic data analysis and privacy regulation. We recommend that the SHGP’s regulators launch awareness campaigns and educational programs to increase and improve public awareness and knowledge regarding the SHGP’s benefits and applications. Furthermore, we propose a strategy for genetic data sharing which will facilitate genetic data sharing between institutions and advance Personalized Medicine in genetic diseases’ diagnosis and treatment.

Flimma: a federated and privacy-aware tool for differential gene expression analysis

Aggregating transcriptomics data across hospitals can increase sensitivity and robustness of differential expression analyses, yielding deeper clinical insights. As data exchange is often restricted by privacy legislation, meta-analyses are frequently employed to pool local results. However, the accuracy might drop if class labels are inhomogeneously distributed among cohorts. Flimma ( https://exbio.wzw.tum.de/flimma/ ) addresses this issue by implementing the state-of-the-art workflow limma voom in a federated manner, i.e., patient data never leaves its source site. Flimma results are identical to those generated by limma voom on aggregated datasets even in imbalanced scenarios where meta-analysis approaches fail.

Implementing the FAIR Data Principles in precision oncology: review of supporting initiatives

Compelling research has recently shown that cancer is so heterogeneous that single research centres cannot produce enough data to fit prognostic and predictive models of sufficient accuracy. Data sharing in precision oncology is therefore of utmost importance. The Findable, Accessible, Interoperable and Reusable (FAIR) Data Principles have been developed to define good practices in data sharing. Motivated by the ambition of applying the FAIR Data Principles to our own clinical precision oncology implementations and research, we have performed a systematic literature review of potentially relevant initiatives. For clinical data, we suggest using the Genomic Data Commons model as a reference as it provides a field-tested and well-documented solution. Regarding classification of diagnosis, morphology and topography and drugs, we chose to follow the World Health Organization standards, i.e. ICD10, ICD-O-3 and Anatomical Therapeutic Chemical classifications, respectively. For the bioinformatics pipeline, the Genome Analysis ToolKit Best Practices using Docker containers offer a coherent solution and have therefore been selected. Regarding the naming of variants, we follow the Human Genome Variation Society's standard. For the IT infrastructure, we have built a centralized solution to participate in data sharing through federated solutions such as the Beacon Networks.

Differential privacy in health research: A scoping review

OBJECTIVE

Differential privacy is a relatively new method for data privacy that has seen growing use due its strong protections that rely on added noise. This study assesses the extent of its awareness, development, and usage in health research.

MATERIALS AND METHODS

A scoping review was conducted by searching for ["differential privacy" AND "health"] in major health science databases, with additional articles obtained via expert consultation. Relevant articles were classified according to subject area and focus.

RESULTS

A total of 54 articles met the inclusion criteria. Nine articles provided descriptive overviews, 31 focused on algorithm development, 9 presented novel data sharing systems, and 8 discussed appraisals of the privacy-utility tradeoff. The most common areas of health research where differential privacy has been discussed are genomics, neuroimaging studies, and health surveillance with personal devices. Algorithms were most commonly developed for the purposes of data release and predictive modeling. Studies on privacy-utility appraisals have considered economic cost-benefit analysis, low-utility situations, personal attitudes toward sharing health data, and mathematical interpretations of privacy risk.

DISCUSSION

Differential privacy remains at an early stage of development for applications in health research, and accounts of real-world implementations are scant. There are few algorithms for explanatory modeling and statistical inference, particularly with correlated data. Furthermore, diminished accuracy in small datasets is problematic. Some encouraging work has been done on decision making with regard to epsilon. The dissemination of future case studies can inform successful appraisals of privacy and utility.

CONCLUSIONS

More development, case studies, and evaluations are needed before differential privacy can see widespread use in health research.

A Curriculum for Genomic Education of Molecular Genetic Pathology Fellows: A Report of the Association for Molecular Pathology Training and Education Committee

Molecular genetic pathology (MGP) is a subspecialty of pathology and medical genetics and genomics. Genomic testing, which we define as that which generates large data sets and interrogates large segments of the genome in a single assay, is increasingly recognized as essential for optimal patient care through precision medicine. The most common genomic testing technologies in clinical laboratories are next-generation sequencing and microarray. It is essential to train in these methods and to consider the data generated in the context of the diagnosis, medical history, and other clinical findings of individual patients. Accordingly, updating the MGP fellowship curriculum to include genomics is timely, important, and challenging. At the completion of training, an MGP fellow should be capable of independently interpreting and signing out results of a wide range of genomic assays and, given the appropriate context and institutional support, of developing and validating new assays in compliance with applicable regulations. The Genomics Task Force of the MGP Program Directors, a working group of the Association for Molecular Pathology Training and Education Committee, has developed a genomics curriculum framework and recommendations specific to the MGP fellowship. These recommendations are presented for consideration and implementation by MGP fellowship programs with the understanding that MGP programs exist in a diversity of clinical practice environments with a spectrum of available resources.

Having Our “Omic” Cake and Eating It Too?: Evaluating User Response to Using Blockchain Technology for Private and Secure Health Data Management and Sharing

This paper reports on end users' perspectives on the use of a blockchain solution for private and secure individual “omics” health data management and sharing. This solution is one output of a multidisciplinary project investigating the social, data, and technical issues surrounding application of blockchain technology in the context of personalized healthcare research. The project studies potential ethical, legal, social, and cognitive constraints of self-sovereign healthcare data management and sharing, and whether such constraints can be addressed through careful design of a blockchain solution.

Genetic Information Insecurity as State of the Art

Genetic information is being generated at an increasingly rapid pace, offering advances in science and medicine that are paralleled only by the threats and risk present within the responsible systems. Human genetic information is identifiable and contains sensitive information, but genetic information security is only recently gaining attention. Genetic data is generated in an evolving and distributed cyber-physical system, with multiple subsystems that handle information and multiple partners that rely and influence the whole ecosystem. This paper characterizes a general genetic information system from the point of biological material collection through long-term data sharing, storage and application in the security context. While all biotechnology stakeholders and ecosystems are valuable assets to the bioeconomy, genetic information systems are particularly vulnerable with great potential for harm and misuse. The security of post-analysis phases of data dissemination and storage have been focused on by others, but the security of wet and dry laboratories is also challenging due to distributed devices and systems that are not designed nor implemented with security in mind. Consequently, industry standards and best operational practices threaten the security of genetic information systems. Extensive development of laboratory security will be required to realize the potential of this emerging field while protecting the bioeconomy and all of its stakeholders.

Informed Consent for Genetic and Genomic Research

Genetic research often utilizes or generates information that is potentially sensitive to individuals, families, or communities. For these reasons, genetic research may warrant additional scrutiny from investigators and governmental regulators, compared to other types of biomedical research. The informed consent process should address the range of social and psychological issues that may arise in genetic research. This article addresses a number of these issues, including recruitment of participants, disclosure of results, psychological impact of results, insurance and employment discrimination, community engagement, consent for tissue banking, and intellectual property issues. Points of consideration are offered to assist in the development of protocols and consent processes in light of contemporary debates on a number of these issues. © 2020 Wiley Periodicals LLC.

Developing model biobanking consent language: what matters to prospective participants?

BACKGROUND

Efforts to improve informed consent have led to calls for providing information a reasonable person would want to have, in a way that facilitates understanding of the reasons why one might or might not want to participate. At the same time, advances in large-scale genomic research have expanded both the opportunities and the risks for participants, families, and communities. To advance the use of effective consent materials that reflect this landscape, we used empirical data to develop model consent language, as well as brief questions to assist people in thinking about their own values relative to participation.

METHODS

We conducted in-person interviews to gather preliminary input on these materials from a diverse sample (n = 32) of the general population in Nashville, Tennessee. We asked them to highlight information they found especially reassuring or concerning, their hypothetical willingness to participate, and their opinions about the values questions.

RESULTS

Consent information most often highlighted as reassuring included the purpose of the biobank, the existence and composition of a multidisciplinary oversight committee, the importance of participants' privacy and efforts to protect it, and controlled access to a scientific database. Information most often highlighted as concerning included the deposition of data in a publicly accessible database, the risk of unintended access to data, the potential for non-research use of data, and use of medical record information in general. Seventy-five percent of participants indicated initial willingness to participate in the hypothetical biobank; this decreased to 66% as participants more closely considered the information over the course of the interview. A large majority rated the values questions as helpful.

CONCLUSIONS

These results are consistent with other research on public perspectives on biobanking and genomic cohort studies, suggesting that our model language effectively captures commonly expressed reasons for and against participation. Our study enriches this literature by connecting specific consent form disclosures with qualitative data regarding what participants found especially reassuring or concerning and why. Interventions that facilitate individuals' closer engagement with consent information may result in participation decisions more closely aligned with their values.

Informed Consent Form Challenges for Genetic Research in Jordan

Background

Informed consent is an obligatory requirement for research engaging human subjects. Informed consent form (ICF) should be provided for human subjects to confirm their willingness for voluntary participation in a study. Ethical and legal obligations necessitate the presence of informed consent essential items to be built into the ICF.

Objective

To evaluate the content of ICFs obtained from different genetic studies accomplished in Jordan and their adherence to ethical guidelines proposed by the International Conference on Harmonization—Good Clinical Practice (ICHGCP).

Methods and Measures

A total of 44 ICFs obtained from master theses and grant proposals at two major universities in Jordan were analyzed according to the good clinical practice criteria proposed by ICHGCP. ICFs were scored for the presence or absence of ICF main items/categories.

Results

Results show inadequate information present in the examined ICFs. The highest information score was 17 out of 20, while the lowest score was one out of 20. The average score for all studied ICFs was 6.18±3.65. Among essential items/categories that were absent from the majority of studied ICFs were a statement about voluntary participation, confidentiality of data, compensation to study participants, risk/benefits of the study, and researchers’ contact information.

Conclusion

The ICFs were missing a number of required items. This could reflect inadequate knowledge about minimal informed consent requirements among Jordanian investigators highlighting the need for research ethical training in the country.

The Evolving Field of Genetic Epidemiology: From Familial Aggregation to Genomic Sequencing

The field of genetic epidemiology is relatively young and brings together genetics, epidemiology, and biostatistics to identify and implement the best study designs and statistical analyses for identifying genes controlling risk for complex and heterogeneous diseases (i.e., those where genes and environmental risk factors both contribute to etiology). The field has moved quickly over the past 40 years partly because the technology of genotyping and sequencing has forced it to adapt while adhering to the fundamental principles of genetics. In the last two decades, the available tools for genetic epidemiology have expanded from a genetic focus (considering 1 gene at a time) to a genomic focus (considering the entire genome), and now they must further expand to integrate information from other “-omics” (e.g., epigenomics, transcriptomics as measured by RNA expression) at both the individual and the population levels. Additionally, we can now also evaluate gene and environment interactions across populations to better understand exposure and the heterogeneity in disease risk. The future challenges facing genetic epidemiology are considerable both in scale and techniques, but the importance of the field will not diminish because by design it ties scientific goals with public health applications.

Decisional conflict among adolescents and parents making decisions about genomic sequencing results

Genomic testing of adolescents is increasing yet engaging them in decision-making is not routine. We assessed decisional conflict in adolescents and a parent making independent decisions about actual genomic testing results and factors that influenced their choices. We enrolled 163 dyads consisting of an adolescent (13-17 years) not selected based on a specific clinical indication and one parent. After independently choosing categories of conditions to learn for the adolescent, participants completed the validated Decisional Conflict Scale and a survey assessing factors influencing their respective choices. Adolescents had higher decisional conflict scores than parents (15.6 [IQR:4.7-25.6] vs 9.4 [IQR:1.6-21.9]; P = .0007). Adolescents with clinically significant decisional conflict were less likely to choose to learn all results than adolescents with lower decisional conflict (19.6% vs 80.4%; P < .0001) and less likely to report their choices were influenced by actionability of results (33.3% vs 18.9%; P = .044) and feeling confident they can deal with the results (71.2% vs 91.9%; P = .0005). Our findings suggest higher decisional conflict in adolescents may influence the type and amount of genomic results they wish to learn. Additional research assessing decisional conflict and factors influencing testing choices among adolescents in clinical settings are required.

Bayesian Network Construction and Genotype-Phenotype Inference Using GWAS Statistics

Genome-wide association studies (GWASs) have received increasing attention to understand how genetic variation affects different human traits. In this paper, we study whether and to what extent exploiting the GWAS statistics can be used for inferring private information about a human individual. We first provide a method to construct a three-layered Bayesian network explicitly revealing the conditional dependency between single-nucleotide polymorphisms (SNPs) and traits from public GWAS catalog. The key challenge in building a Bayesian network from GWAS statistics is the specification of the conditional probability table of a variable with multiple parent variables. We employ the models of independence of causal influences which assume that the causal mechanism of each parent variable is mutually independent. We then formulate three inference problems based on the dependency relationship captured in the Bayesian network, namely trait inference given SNP genotype, genotype inference given trait, and trait inference given known traits, and develop efficient formulas and algorithms. Different from previous work, the possible target of these inference problems we study may be any individual, not limited to GWAS participants. Empirical evaluations show the effectiveness of our proposed methods. In summary, our work implies that meaningful information can be inferred from modeling GWAS statistics, and appropriate privacy protection mechanisms need to be developed to protect genetic privacy not only of GWAS participants but also regular individuals.

Genome, transcriptome and proteome: the rise of omics data and their integration in biomedical sciences

Advances in the technologies and informatics used to generate and process large biological data sets (omics data) are promoting a critical shift in the study of biomedical sciences. While genomics, transcriptomics and proteinomics, coupled with bioinformatics and biostatistics, are gaining momentum, they are still, for the most part, assessed individually with distinct approaches generating monothematic rather than integrated knowledge. As other areas of biomedical sciences, including metabolomics, epigenomics and pharmacogenomics, are moving towards the omics scale, we are witnessing the rise of inter-disciplinary data integration strategies to support a better understanding of biological systems and eventually the development of successful precision medicine. This review cuts across the boundaries between genomics, transcriptomics and proteomics, summarizing how omics data are generated, analysed and shared, and provides an overview of the current strengths and weaknesses of this global approach. This work intends to target students and researchers seeking knowledge outside of their field of expertise and fosters a leap from the reductionist to the global-integrative analytical approach in research.

Systematizing Genome Privacy Research: A Privacy-Enhancing Technologies Perspective

Rapid advances in human genomics are enabling researchers to gain a better understanding of the role of the genome in our health and well-being, stimulating hope for more effective and cost efficient healthcare. However, this also prompts a number of security and privacy concerns stemming from the distinctive characteristics of genomic data. To address them, a new research community has emerged and produced a large number of publications and initiatives. In this paper, we rely on a structured methodology to contextualize and provide a critical analysis of the current knowledge on privacy-enhancing technologies used for testing, storing, and sharing genomic data, using a representative sample of the work published in the past decade. We identify and discuss limitations, technical challenges, and issues faced by the community, focusing in particular on those that are inherently tied to the nature of the problem and are harder for the community alone to address. Finally, we report on the importance and difficulty of the identified challenges based on an online survey of genome data privacy experts.

Society and personal genome data

Genomic data offer a goldmine of information for understanding the contribution of genetic variation makes to health and disease. The potential of genomic medicine, to predict, diagnose, manage and treat genetic disease, is underpinned by accurate variant interpretation. This in itself hinges on the ability to access large and varied genomic databases. There is now recognition that international collaboration between research and healthcare systems are paramount to delivering the scale of genomic data required. No single research group, institute or country will liberate our understanding, it is only through global cooperation, together with super computing power, will we truly make sense of how genotype and phenotype correlate. Whilst it is logistically possible to create computing systems that talk to each other and aggregate datasets ready to reveal novel correlations, the bottom line is that this will only happen if people (whether they be scientists, clinicians, patients, research participants, policy makers, politicians, law makers) support the principle that we should be donating, accessing and sharing our DNA data in this way. And in order to make the most sense of genomics, given the geographical and ancestral variation between us, such people are likely to be the majority of society. Within this review, a perspective is proffered on the human story that underpins genomic 'big data' access and how we are at a tipping point as a society-we need to decide collectively, are we in? and if so, what needs to be in place to protect us? or are we out?

Considering the Benefits and Risks of Research Participants' Access to Sequence Data

The use of sequencing technologies has greatly expanded in both research and clinical settings. The generation of voluminous datasets has raised several issues regarding data sharing and access. Current regulations require clinical laboratories and some research laboratories to provide access to test data, including sequencing data, directly to patients upon request. There is some controversy over whether this access right may be somewhat broader, encompassing research data as well-a question beyond the scope of this article. It is clear that in the research setting, deposition of sequencing data into public or private databases often occurs, although little information exists about the return of data files to research participants (in contrast to the extensive deliberations regarding return of results). Thus, further consideration of the issue of access to data files is warranted as well as more effort to understand both patients' and research participants' use of the data.

Aftermath of bustamante attack on genomic beacon service

BACKGROUND

With the enormous need for federated eco-system for holding global genomic and clinical data, Global Alliance for Genomic and Health (GA4GH) has created an international website called beacon service which allows a researcher to find out whether a specific dataset can be utilized to his or her research beforehand. This simple webservice is quite useful as it allows queries like whether a certain position of a target chromosome has a specific nucleotide. However, the increased integration of individuals genomic data into clinical practice and research raised serious privacy concern. Though the answer of such queries are yes or no in Bacon network, it results in serious privacy implication as demonstrated in a recent work from Shringarpure and Bustamante. In their attack model, the authors demonstrated that with a limited number of queries, presence of an individual in any dataset can be determined.

METHODS

We propose two lightweight algorithms (based on randomized response) which captures the efficacy while preserving the privacy of the participants in a genomic beacon service. We also elaborate the strength and weakness of the attack by explaining some of their statistical and mathematical models using real world genomic database. We extend their experimental simulations for different adversarial assumptions and parameters.

RESULTS

We experimentally evaluated the solutions on the original attack model with different parameters for better understanding of the privacy and utility tradeoffs provided by these two methods. Also, the statistical analysis further elaborates the different aspects of the prior attack which leads to a better risk management for the participants in a beacon service.

CONCLUSIONS

The differentially private and lightweight solutions discussed here will make the attack much difficult to succeed while maintaining the fundamental motivation of beacon database network.