PriEval-Protect: A Unified Framework for Privacy Evaluation and Protection in Healthcare Systems

arXiv:2607.13754 · cs.CR · Submitted 2026-07-15 · Read on arXiv

Ilef Chebil, Asma El Hadj, Souheib Yousfi, Aroua Hedhili, Layth Sliman

cs.CR

Submitted: 2026-07-15

Comments: 10 pages, 3 figures. Accepted at IDT 2026

Code: https://github.com/OpenMined/PySyft

License: http://creativecommons.org/licenses/by/4.0/

The gist: Safeguarding patient privacy while enabling meaningful healthcare data use remains critical under GDPR and HIPAA.

Terminology

Abstract

Safeguarding patient privacy while enabling meaningful healthcare data use remains critical under GDPR and HIPAA. Existing compliance methods are manual, error-prone, and separate policy audits from data-level assessments. This paper presents PriEval-Protect, a two-phase framework for unified privacy risk evaluation and mitigation. The evaluation phase combines regulatory compliance scoring using a fine-tuned legal LLM with RAG, and technical analysis via encryption type, data architecture, and metrics including similarity, uncertainty, adversary success, and information gain/loss. A composite risk score uses weighted aggregation via Analytic Hierarchy Process. The protection phase recommends countermeasures including federated learning and differential privacy based on assessed risk. Results on hospital documents and datasets demonstrate regulation-aligned, explainable assessments, bridging legal conformance and data-level risk analysis.

Sources

Related papers