Additional Benefits and Use Cases for a Data Clean Room in Healthcare
While the data clean room is an increasingly important component of modern data center security and recovery strategy, healthcare organizations can benefit from the setup in a few other ways.
Privacy-Enhanced Collaboration Across Institutions
The nature of the data clean room makes it valuable for collaboration among multiple organizations, as they contribute copies or views of data in accordance with their own data governance principles, Kim notes.
“As a matter of principle, no party can see another party’s raw data set, identifiers or proprietary data,” she says. This positions organizations to work together on medical research and population health analytics, as well as clinical and operational improvement initiatives, while preserving the privacy of patient data.
Accelerated Development of Drugs and Other Treatments
Kim describes the data clean room as a “force multiplier” for life science organizations, as they’re able to bring together rich yet sensitive data sets from clinical records and real-world evidence to genomic sequences. Reilly agrees, saying that data clean rooms are “both more efficient and more privacy protective” than traditional data-sharing methods.
Without this environment in place, organizations would be subject to long, complex approval processes for data transfer requests to sufficiently ensure identifiable, proprietary or sensitive information isn’t exposed. “The innovation pathway to new discoveries and clinical insights is now shorter and much more efficient with the use of data clean rooms,” Kim says.
RELATED: Healthcare organizations must prioritize clinical care resiliency.
Considerations for Deploying a Data Clean Room
According to the FTC, when “constraints are appropriately designed, implemented, and monitored,” a data clean room “can limit the use and disclosures of the data of the people represented in the datasets.” Such constraints aren’t automatic, the agency adds, and must be intentionally configured and deployed to preserve privacy.
With that in mind, Kim notes, any organization implementing a data clean room must consider:
- How data will be used, disclosed and processed
- How use broadly aligns with clinical, research and/or operational workflows
- How access controls will be configured
- Who has permission to run queries
- How audit logs track activity within the data clean room
The FTC notes that granting more entities access to a data clean room can have the unintended consequence of expanding the perimeter that requires defense. As a result, organizations hosting a data clean room environment must be aware of their partners’ overall security practices, data governance policies, and storage and permission configurations. The agency notes that one partner with lax policies, such as not requiring multifactor authentication to grant access, could be enough to expose the data clean room to an attack that compromises privacy and puts organizations at risk.
“Data clean rooms do not magically make your data collaboration fully compliant,” Reilly says. “Clean rooms are capable of making a data collaboration fully compliant if deployed properly, but this will depend heavily on many factors — the specific use case, the data involved, the privacy protections applied and the contract terms that are negotiated.”
