Guidance on evaluating a privacy protection technique for the AI era

Here's a tricky situation: A business that sells fitness trackers to consumers has amassed a large database of health data about its customers. Researchers would like access to this information to improve medical diagnostics. While the business is concerned about sharing such sensitive, private information, it also would like to support this important research. So how do the researchers obtain useful and accurate information that could benefit society while also keeping individual privacy intact?

business consumers customers data database diagnostics fitness fitness trackers guidance health health data information medical privacy protection researchers security