<?xml version="1.0"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.2 20190208//EN" "JATS-journalpublishing1.dtd" [
]>
<article xml:lang="en" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:mml="http://www.w3.org/1998/Math/MathML"
  dtd-version="1.2" article-type="abstract">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher-id">IJPDS</journal-id>
      <journal-title-group>
        <journal-title>International Journal of Population Data Science</journal-title>
        <abbrev-journal-title>IJPDS</abbrev-journal-title>
      </journal-title-group>
      <issn pub-type="epub">2399-4908</issn>
      <publisher>
        <publisher-name>Swansea University</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.23889/ijpds.v9i5.2909</article-id>
      <article-id pub-id-type="publisher-id">9:5:416</article-id>
      <title-group>
        <article-title>“Hiding in the Crowd”: defining conceptual models for privacy-preserving linkage of place-based and personal data for public benefit research.</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Boyd</surname>
            <given-names initials="A">Andy</given-names>
          </name>
          <xref ref-type="aff" rid="affil-1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Dibben</surname>
            <given-names initials="C">Chris</given-names>
          </name>
          <xref ref-type="aff" rid="affil-2">2</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Fry</surname>
            <given-names initials="R">Rich</given-names>
          </name>
          <xref ref-type="aff" rid="affil-3">3</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Hardelid</surname>
            <given-names initials="P">Pia</given-names>
          </name>
          <xref ref-type="aff" rid="affil-4">4</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Smith</surname>
            <given-names initials="C">Cassie</given-names>
          </name>
          <xref ref-type="aff" rid="affil-5">5</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>McNamara</surname>
            <given-names initials="E">Edel</given-names>
          </name>
          <xref ref-type="aff" rid="affil-5">5</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Davies</surname>
            <given-names initials="B">Bethan</given-names>
          </name>
          <xref ref-type="aff" rid="affil-6">6</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Fecht</surname>
            <given-names initials="D">Daniela</given-names>
          </name>
          <xref ref-type="aff" rid="affil-6">6</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Blackburn</surname>
            <given-names initials="R">Ruth</given-names>
          </name>
          <xref ref-type="aff" rid="affil-4">4</xref>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Gilbert</surname>
            <given-names initials="R">Ruth</given-names>
          </name>
          <xref ref-type="aff" rid="affil-4">4</xref>
        </contrib>
      </contrib-group>
      <aff id="affil-1"><label>1</label><institution>University of Bristol</institution></aff>
      <aff id="affil-2"><label>2</label><institution>University of Edinburgh</institution></aff>
      <aff id="affil-3"><label>3</label><institution>Swansea University</institution></aff>
      <aff id="affil-4"><label>4</label><institution>UCL</institution></aff>
      <aff id="affil-5"><label>5</label><institution>Health Data Research UK</institution></aff>
      <aff id="affil-6"><label>6</label><institution>Imperial College London</institution></aff>
      <pub-date date-type="pub" publication-format="electronic">
        <day>18</day>
        <month>09</month>
        <year>2024</year>
      </pub-date>
      <pub-date date-type="collection" publication-format="electronic">
        <year>2024</year>
      </pub-date>
      <volume>9</volume>
      <issue>5</issue>
      <elocation-id>2909</elocation-id>
      <permissions>
        <license license-type="open-access" xlink:href="https://creativecommons.org/licences/by/4.0/">
          <license-p>This work is licenced under a Creative Commons Attribution 4.0 International License.</license-p>
        </license>
      </permissions>
      <self-uri xlink:href="https://ijpds.org/article/view/2909">This article is available from the IJPDS website at: https://ijpds.org/article/view/2909</self-uri>
    </article-meta>
  </front>
  <body>
    <sec>
      <title>Objective</title>
      <p>To address the challenge of linking identifiable but low-sensitivity place-based data with high-sensitivity, de-identified, health and socio-economic records. While also minimising the financial and carbon costs of computationally intensive environmental modelling.</p>
    </sec>
    <sec>
      <title>Objective</title>
      <p>For domain and legal experts, TRE leads and public contributors to co-develop a trusted system-wide governance model for linking these data.</p>
    </sec>
    <sec>
      <title>Results</title>
      <p>We identified the UK’s ‘Unique Property Reference Numbers’ (UPRNs) - a geo-coordinated national property ID number - as ideally suited for linking individuals to households and households to place-based data. Under Data Protection laws, UPRNs are considered inherently identifiable, yet public-domain research use is permitted as the data have low sensitivity and there is broad societal acceptance. Once linked with individuals’ records, additional controls are needed to preserve privacy. We developed a workflow for modelling place-based data at a national level by a single agency and then, using trusted third parties, de-identifying and sharing minimised derived extracts into TREs for linkage and analysis. To maintain confidentiality, the UPRNs of the population of interest are masked by matched ‘control’ UPRNs drawn from the wider population. We will discuss permutations of the model, proof-of-concept implementations in UK TREs and public views on the models proposed.</p>
    </sec>
    <sec>
      <title>Conclusions</title>
      <p>The challenge can be addressed by minimising the data flowing between national generators of place-based data and TREs using trusted third parties and masking data to maintain confidentiality.</p>
    </sec>
    <sec>
      <title>Implications</title>
      <p>Relatively small adjustments to existing TRE workflows principles could enable new research possibilities without requiring re-evaluation of current governance norms or high-cost infrastructure changes.</p>
    </sec>
  </body>
</article>