Legal and Procedural Health Data Anonymization Framework of the Faculty of Biomedical Engineering, Czech Technical University

Real-world health data hold a wealth of information suitable for secondary analysis. To harness the potential of this data, it is crucial to protect personal information and adhere to legal frameworks. The Faculty of Biomedical Engineering, Czech Technical university has instituted a Directive and Instructions governing the processing of health personal data for scientific purposes. These Instructions provide guidelines and procedures for various stakeholders in this process, encompassing data providers, data recipients, and the Anonymization Entity. The Anonymization Entity plays a crucial role, acting as a regulatory force in facilitating the provision of data for secondary purposes. To ensure fundamental data protection, the Instructions propose procedures for data providers. Furthermore, the provider must submit the data to an anonymization entity to assess the risk of disclosure, and if the risk is significant, to anonymize it. Once the risk is lowered to the recommended equivalence class threshold of 11, the data is made available to the data recipient for secondary analysis.