<?xml version="1.0"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.2 20190208//EN" "JATS-journalpublishing1.dtd"[]>
<article xml:lang="en" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:mml="http://www.w3.org/1998/Math/MathML" dtd-version="1.2" article-type="research-article">
<front>
<journal-meta>
<journal-id journal-id-type="publisher-id">IJPDS</journal-id>
<journal-title-group>
<journal-title>International Journal of Population Data Science</journal-title>
<abbrev-journal-title>IJPDS</abbrev-journal-title>
</journal-title-group>
<issn pub-type="epub">2399-4908</issn>
<publisher>
<publisher-name>Swansea University</publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id pub-id-type="doi">10.23889/ijpds.v11i5.3583</article-id>
<article-id pub-id-type="publisher-id">11:5:3583</article-id>
<article-id pub-id-type="pii">S2399490821035837</article-id>
<article-categories>
<subj-group subj-group-type="heading">
<subject>Population Data Science</subject>
</subj-group>
</article-categories>
<title-group>
<article-title>A Privacy-preserving Aggregation of Distributed Summary-Level Data (PARADISE)</article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author"><name><surname>Saskin</surname><given-names initials="R">Refik</given-names></name><xref ref-type="aff" rid="affil-1"><sup>1</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>Curtis Maillet</surname><given-names initials="D">Donna</given-names></name><xref ref-type="aff" rid="affil-2"><sup>2</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>McDonald</surname><given-names initials="T">Ted</given-names></name><xref ref-type="aff" rid="affil-2"><sup>2</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>Platt</surname><given-names initials="R">Robert</given-names></name><xref ref-type="aff" rid="affil-3"><sup>3</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>Dormuth</surname><given-names initials="C">Colin</given-names></name><xref ref-type="aff" rid="affil-4"><sup>4</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>Duchen</surname><given-names initials="R">Raquel</given-names></name><xref ref-type="aff" rid="affil-1"><sup>1</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>Gatley</surname><given-names initials="J">Jodi</given-names></name><xref ref-type="aff" rid="affil-1"><sup>1</sup></xref></contrib>
<contrib contrib-type="author"><name><surname>Mondor</surname><given-names initials="L">Luke</given-names></name><xref ref-type="aff" rid="affil-1"><sup>1</sup></xref></contrib>
<aff id="affil-1"><label>1</label><institution>ICES, Toronto, Canada</institution></aff>
<aff id="affil-2"><label>2</label><institution>DataNB, Fredricton, Canada</institution></aff>
<aff id="affil-3"><label>3</label><institution>McGill University, Montreal, Canada</institution></aff>
<aff id="affil-4"><label>4</label><institution>University of British Columbia, Vancouver, Canada</institution></aff>
</contrib-group>
<pub-date date-type="pub" publication-format="electronic"><day></day><month></month><year></year></pub-date>
<pub-date date-type="collection" publication-format="electronic"><year></year></pub-date>
<volume>11</volume>
<issue>5</issue>
<elocation-id>3583</elocation-id>
<permissions>
<license license-type="open-access" xlink:href="https://creativecommons.org/licenses/by-nc-nd/4.0/">
<license-p>This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.</license-p>
</license>
</permissions>
<self-uri xlink:href="https://ijpds.org/article/view/3583">This article is available from the IJPDS website at: https://ijpds.org/article/view/3583</self-uri>
<abstract>
<p>Small-cell counts – i.e., data-table or stratum cells containing very few individuals – present a persistent disclosure risk in human-research and administrative-data settings. In Canada, layered legal, ethical and statistical disclosure-control frameworks require reasonably robust protections for such data, yet multi-regional data integration poses additional challenges as varying suppression thresholds and linkages increase re-identification risk. Here we introduce a novel privacy-preserving method for combining small-cell data in studies involving three or more data centres in Canada, enabling pooled analysis while respecting provincial and federal confidentiality obligations. We present the methodological framework and application to categorical data, continuous data, and Kaplan-Meier survival data, and discuss implications for data governance, research integrity and public trust. Our findings suggest that the proposed approach strikes a practical balance between protecting individual privacy and preserving analytic value, thus offering a pathway for multi-regional collaboration under Canadian law and ethics guidelines and enhanced analyses of distributed data.</p>
</abstract>
</article-meta>
</front>
</article>