Systems and methods for enabling data de-identification and anonymous data linkage

A method for dynamically de-identifying data from a data source comprising:

• at a first server within a first security domain:
• securely receiving, at the first server and from a remote device in a second security domain different than the first security domain, a key value from the remote device;
• in response to receiving the key value at the first server:
• accessing a dataset maintained at the first server, the dataset including a record that uniquely identifies an individual;
• generating a de-identified dataset from the dataset by removing the data that uniquely identified the individual from the record;
• and
• generating a hash based on the removed data;
• and
• at a second server within a third security domain different than each of the first security domain and the second security domain:
• securely receiving the hash from the first server;
• automatically matching the de-identified dataset with a previously de-identified dataset by comparing the hash based on the removed data to a hash associated with the previously de-identified data;
• and
• in response to automatically matching the de-identified dataset with the previously de-identified dataset, automatically generating a universal de-identified data set by providing a unique identifier for the universal de-identified dataset to each of the de-identified dataset and the previously de-identified dataset,
• wherein the first server requires proper authentication or encryption to access the second server.

A non-transitory computer readable medium including executable instructions for dynamically de-identifying data from a data source, the instructions comprising:

• first instructions executable by a processor of a first server, such that, when executed by the processor of the first server, the instructions cause the processor of the first server to:
• securely receive a key value from the remote device;
• in response to receiving the key value:
• access a dataset maintained by the first server, the dataset including a record that uniquely identifies an individual;
• generate a de-identified dataset from the dataset by removing the data that uniquely identified the individual from the record;
• and
• generate a hash based on the removed data;
• and
• second instructions executable by a processor of a second server, such that, when executed by the processor of the second server, the instructions cause the processor of the second server to:
• securely receive the hash from the first server;
• automatically match the de-identified dataset with a previously de-identified dataset by comparing the hash based on the removed data to a hash associated with the previously de-identified data;
• and
• when a match occurs, automatically generate a universal de-identified data set by providing a unique identifier for the universal de-identified dataset to each of the de-identified dataset and the previously de-identified dataset
• wherein the first server requires proper authentication or encryption to access the second server.