Abstract: Systems, methods and non-transitory computer readable media for assigning confidence to data de-identification are provided. A data collection may be accessed to generate a de-identified copy of the data collection. A confidence level that the generated de-identified copy does not include identified information may be determined. In response to a first value of the confidence level, providing particular information based on the de-identified copy of the data collection to a first entity and to a second entity. In response to a second value of the confidence level, providing the particular information to the first entity and forgoing providing the particular information to the second entity.

Abstract: Systems, methods and non-transitory computer readable media for controlling access in privacy firewalls are provided. A request to access a content of an element may be received, the content of the element may include a first portion and a second portion, the first portion may include identifiable information and the second portion may include no identifiable information. A permission record corresponding to the element may be accessed. In response to a first value in the permission record, access may be provided to the content of the element, including access to the first and second portions, and in response to a second value in the permission record, partial access may be provided to the content of the element, the partial access may include access to the second portion and may exclude access to the first portion.

Abstract: Systems, methods and non-transitory computer readable media for determining permissions in privacy firewalls are provided. At least part of a content of a data collection may be analyzed to determine a subject matter. A permission corresponding to the data collection and at least one user may be determined based on the subject matter. A request of the at least one user to access at least part of the data collection may be received. In response to a first determined permission, the requested access to the at least part of the data collection may be provided, and in response to a second determined permission, the request may be denied.

Abstract: Systems and method for selectively providing information about medical data are provided. A first statistical query based on an input from a first user may be received. A first estimated property based on the first statistical query may be provided to the first user. A second statistical query based on an input from a second user may be received. A first group of users that includes the first user may be selected. It may be determined whether the first group of users includes the second user. In response to a determination that the first group of users does not include the second user, a second estimated property may be provided to the second user, and in response to a determination that the first group of users includes the second user, providing the second estimated property may be forwent.

Abstract: Systems, methods and non-transitory computer readable media for detecting identified information in privacy firewalls are provided. A repeating field in a data collection may be analyzed to determine whether the field is likely to include information that identifies particular individuals. An access request of a user may be received. A permission record associated with the user may be accessed. In response to the field being likely to include information that identifies particular individuals and a first value in the permission record, access to the field may be denied, in response to the field not being likely to include information that identifies particular individuals and the first value in the permission record, access to the field may be provided, and in response to a second value in the permission record, access to the field may be provided.

Abstract: Systems, methods and non-transitory computer readable media for determining permissions in privacy firewalls are provided. At least part of a content of a data collection may be analyzed to determine a subject matter. A permission corresponding to the data collection and at least one user may be determined based on the subject matter. A request of the at least one user to access at least part of the data collection may be received. In response to a first determined permission, the requested access to the at least part of the data collection may be provided, and in response to a second determined permission, the request may be denied.

Abstract: Systems, methods and non-transitory computer readable media for ownership determination in privacy firewalls are provided. A request of a user to perform an action for creating a new data collection using source data collections may be received. In response to the user not having permission to view at least part of at least one of the source data collections and the user not being an owner of the at least one of the source data collections, it may be determined that the user is not an owner of the new data collection, and in response to the user being at least an owner of the data collection or having permission to view the entire data collection for all source data collections, it may be determined that the user is an owner of the new data collection.

Abstract: Systems, methods and non-transitory computer readable media for controlling access in privacy firewalls are provided. A request to access a content of an element may be received, the content of the element may include a first portion and a second portion, the first portion may include identifiable information and the second portion may include no identifiable information. A permission record corresponding to the element may be accessed. In response to a first value in the permission record, access may be provided to the content of the element, including access to the first and second portions, and in response to a second value in the permission record, partial access may be provided to the content of the element, the partial access may include access to the second portion and may exclude access to the first portion.

Abstract: Systems and method for selectively providing information about medical data are provided. A first statistical query based on an input from a first user may be received. A first estimated property based on the first statistical query may be provided to the first user. A second statistical query based on an input from a second user may be received. A first group of users that includes the first user may be selected. It may be determined whether the first group of users includes the second user. In response to a determination that the first group of users does not include the second user, a second estimated property may be provided to the second user, and in response to a determination that the first group of users includes the second user, providing the second estimated property may be forwent.

Abstract: Systems and methods for enabling graphical illustration of private medical information are provided. A subgroup defining input may be received, the subgroup defining input may define a subgroup of a group of patients. A statistical query about the subgroup of the group of patients may be received. A size of the subgroup of the group of patients may be determined. The determined size of the subgroup of the group of patients may be compared with a selected subgroup size threshold. In response to the determined size of the subgroup of the group of patients being larger than the selected subgroup size threshold, first information may be provided, and in response to the determined size of the subgroup of the group of patients being smaller than the selected subgroup size threshold, providing the first information may be forwent.