Re-identification of anonymised MRI head images with publicly available software: investigation of the current risk to patient privacy

Abstract

Background: Facial recognition software (FRS) has historically been perceived as lacking the capability to identify individuals from cross-sectional medical images. Utilising such data for identification purposes was considered infeasible due to the substantial computational power and specialised technical expertise it would require. However, recent advancements in accessible artificial intelligence-based (AI-based) software and open-source tools have made these applications widely available and easy to use, raising new privacy concerns. Methods: This proof-of-concept was designed as a cross-sectional study and included participants with a verified online presence. Standard magnetic resonance imaging (MRI) head scans were performed on these participants, from which three-dimensional rendering (3DR) images were created using free and publicly available software. These images were used for face searches by free and publicly available FRS. Different head orientations and hairstyles were applied to the 3DR images to assess whether non-facial features influenced the FRS results. All results were obtained between the 10th of February 2024 and the 1st of March 2024. Findings: Face searches of 3DR images in a database containing over 800 million images from the World Wide Web (WWW) yielded correct matches for 50% of the participants in less than 10 min. The user-friendly software required minimal computational knowledge or resources, making this process broadly accessible. Modifying elements such as hairstyles or the orientation of the 3DR to better resemble actual photographs of the participants improved FRS matches. Interpretation: Current existing FRS can swiftly and accurately identify individuals from MRI head scans. This poses a significant privacy risk for participants in enrolled clinical trials and highlights the urgent need for improved data protection measures and increased sensitivity to ensure participant confidentiality.