Search papers, labs, and topics across Lattice.
This study investigates the effectiveness of current medical image de-identification practices by examining whether de-identified scans can still reveal patient identities through a novel approach using coupled, cycle-consistent variational autoencoders. The researchers found that their model could recover recognizable likenesses of patients from de-identified images, achieving an identity-region mean absolute error of 0.163. These findings suggest that de-identified medical images should be treated as biometric data rather than merely anonymized records, raising significant concerns about patient privacy in medical research.
De-identified medical images may still reveal patient identities, challenging the assumption that such scans are truly anonymous.
Medical images are routinely de-identified---names, dates, and other metadata removed---and then shared for research, teaching, and public benchmarks under the assumption that this renders them anonymous. Such de-identification protects the metadata but not the pixels, and---apart from scans that directly contain facial structures---whether the image content itself identifies the patient has received little scrutiny. We investigate this question by learning a cycle-consistent correspondence between a cross-sectional medical image and a non-medical, patient-identifying image, using a pair of coupled, cycle-consistent variational autoencoders. From a held-out scan, the model recovers a recognisable likeness of the patient (identity-region MAE = 0.163); conversely, it synthesises a scan from such an image. These results indicate that a de-identified medical scan remains identifying---it is, in effect, a photograph of the patient---and that imaging data should be governed as biometric data rather than as anonymisable records. To support reproducibility, the code and trained models are shared at https://github.com/attilasimko/public-repository.
