...

• Insider attack
• Outsider attack
• Schwartz et al experiment is difficult to extrapolate from but has a lot of impact on the common understanding of the capabilities of AI.
• Real-world numbers: How many people in the US with gliomas to compare with? 100,000 over a 5-year period, 65 median age.
• If we train on reconstructions, how can you quantify reconstructions?
• Literature needed to inform the HIPAA regulation writers.
• Neuroimaging bias in this context. The wrong conclusions can be reached quickly.
• HIPAA has the statistical arm and the 18 elements arm. Peoples faces may not be useful in a specific context that can be shown statistically.
• Do we need to write a paper or do an experiment? Can we do experiments with data that could risk its status?
• We need a statistical expert who is familiar with quantifying reidentification risk.
• Judy would love to run experiments.
• Could we do experiments with TCIA data? License, data use agreements...
• Judy said she was able to get her IRB to approve experiments with head-neck data.
• Create a sub-group of this task group to plan these experiments.
• Can we apply Facebook's re-id algorithm to a "very large" site (with enough patients to achieve statistical validity on its own)? Federated experiment that aggregates findings to avoid risking re-identification of any individual institution's data. Could get approval for something like this.  
• Brian Bialecki: coordinating centers that know the location of the sites submitting the data, even if they don't retain the patients identities, could be used to reject/narrow matches, since a match to a different geographic location than the catchment region of the site could be assumed to be a false positive.

January 11, 2022 Meeting

Interim Report Best Practices And Recommendations Extract as of 20220107

...