Skip to content
AdminSep 13, 20222 min read

Replica Analytics publishes comprehensive Cardinal Methodology for measuring and managing identity disclosure risks of datasets

Book cover: The Cardinal Methodology for Evaluating Identity Disclosure Risk for Non-Public Data OTTAWA, September 14, 2022 — A new book being published by Replica Analytics, an Aetion company, offers a complete and contemporary risk assessment methodology for accurately measuring and effectively managing the risks associated with sharing health data for secondary purposes.

To innovate and improve healthcare, organizations need to leverage data, but they can face challenges sharing data while preserving privacy and complying with data protection laws. The Cardinal Methodology for Evaluating Identity Disclosure Risk for Non-Public Data is a new publication that brings together a suite of thoroughly researched, tested and applied practices for quantitatively assessing the identifiability of real-world data and clinical trial data. The risks can then be managed with the right safeguards, usually a combination of data transformations and controls, to enable responsible use and sharing of data for secondary purposes, such as different types of analytics and machine learning projects.

The new book, which details a methodology developed through real-world applications, is co-authored by Dr. Khaled El Emam, Senior Vice President and General Manager of Replica Analytics, an Aetion Company, and Lucy Mosquera, Replica’s Director of Data Science. It illustrates how applying the Cardinal Methodology can help organizations maintain a high level of data utility while at the same time protecting privacy.

“Our Cardinal Methodology is highly operational, going beyond simply a principles-based approach,” says Dr. El Emam, who has spent two decades developing and deploying data analytics and privacy enhancing technologies. “With it, we help our partners and clients implement successful re-identification risk management programs and offer the supporting documentation for the risk reports they need on specific datasets. Synthetic data generation is one tool that can be leveraged to manage the risk of re-identification.”
The book is being launched in conjunction with a training course, Practical De-identification Methods for Health Data, taking place October 24 and 25, 2022 at the Aetion office in New York City. The book will be made available to Replica clients and partners, as well as participants of its training and education sessions. The authors will update the methodology as the evidence continues to accumulate and the science evolves.

About Replica Analytics, an Aetion company

Replica Analytics is the premier science-based SDG technology provider to the healthcare industry. The company is a pioneer in the development of unique technologies for generating privacy-protective synthetic data that maintain the statistical properties of real-world data (RWD). The company was acquired in late 2021 by Aetion, the leading regulatory-grade real-world evidence (RWE) technology provider. Replica Synthesis software provides a full suite of synthetic data generation and evaluation capabilities that can solve multiple grand challenges facing the life sciences industry, and health research in general. For more information, visit:

About Aetion

Aetion is a healthcare analytics company that delivers real-world evidence for the manufacturers, purchasers, and regulators of medical treatments and technologies. The Aetion Evidence Platform ® analyzes data from the real world to produce transparent, rapid, and scientifically validated answers on safety, effectiveness, and value. Founded by Harvard Medical School faculty members with decades of experience in epidemiology and health outcomes research, Aetion informs healthcare’s most critical decisions—what works best, for whom, and when—to guide product development, commercialization, and payment innovation. Learn more at and follow us at  @aetioninc.


Anne-Marie Hayden Replica Analytics Communications