Search papers, labs, and topics across Lattice.
This paper introduces a utility-preserving de-identification pipeline (UPDP) for radiology data sharing, using a blacklist/whitelist approach for text and a generative filtering mechanism for images to remove privacy-sensitive information while retaining pathology cues. The method synthesizes privacy-filtered image counterparts and filters radiology reports based on ID terms. Experiments on chest X-rays show that models trained on de-identified data maintain diagnostic accuracy and improve cross-hospital transfer learning, while significantly reducing identity-related accuracy.
Radiology data can be de-identified for cross-hospital sharing without sacrificing diagnostic utility, unlocking larger and more diverse training datasets for medical AI.
Large-scale radiology data are critical for developing robust medical AI systems. However, sharing such data across hospitals remains heavily constrained by privacy concerns. Existing de-identification research in radiology mainly focus on removing identifiable information to enable compliant data release. Yet whether de-identified radiology data can still preserve sufficient utility for large-scale vision-language model training and cross-hospital transfer remains underexplored. In this paper, we introduce a utility-preserving de-identification pipeline (UPDP) for cross-hospital radiology data sharing. Specifically, we compile a blacklist of privacy-sensitive terms and a whitelist of pathology-related terms. For radiology images, we use a generative filtering mechanism that synthesis a privacy-filtered and pathology-reserved counterparts of the original images. These synthetic image counterparts, together with ID-filtered reports, can then be securely shared across hospitals for downstream model development and evaluation. Experiments on public chest X-ray benchmarks demonstrate that our method effectively removes privacy-sensitive information while preserving diagnostically relevant pathology cues. Models trained on the de-identified data maintain competitive diagnostic accuracy compared with those trained on the original data, while exhibiting a marked decline in identity-related accuracy, confirming effective privacy protection. In the cross-hospital setting, we further show that de-identified data can be combined with local data to yield better performance.
