PriEval-Protect: A Unified Framework for Privacy Evaluation and Protection in Healthcare Systems
arXiv:2607.13754
The paper introduces PriEval-Protect, a two‑phase framework that assesses privacy risks in healthcare systems by combining legal compliance scoring with technical data analysis, and then suggests mitigation measures such as federated learning and differential privacy.
Abstract
Safeguarding patient privacy while enabling meaningful healthcare data use remains critical under GDPR and HIPAA. Existing compliance methods are manual, error-prone, and separate policy audits from data-level assessments. This paper presents PriEval-Protect, a two-phase framework for unified privacy risk evaluation and mitigation. The evaluation phase combines regulatory compliance scoring using a fine-tuned legal LLM with RAG, and technical analysis via encryption type, data architecture, and metrics including similarity, uncertainty, adversary success, and information gain/loss. A composite risk score uses weighted aggregation via Analytic Hierarchy Process. The protection phase recommends countermeasures including federated learning and differential privacy based on assessed risk. Results on hospital documents and datasets demonstrate regulation-aligned, explainable assessments, bridging legal conformance and data-level risk analysis.
10 pages, 3 figures. Accepted at IDT 2026