A chest X-ray embedding is not anonymous merely because metadata were removed

A chest X-ray embedding is not anonymous merely because metadata were removed

Main conclusion

Chest X-ray representations generated by three models still allowed prediction of sex, age, ethnicity, and insurance type. Removing metadata columns does not remove signals encoded in the image and its embedding.

What was studied

The authors analyzed MIMIC-CXR and CheXpert embeddings from CXR Foundation, MedCLIP, and BiomedCLIP. Demographic predictability creates a pathway for shortcuts to propagate into downstream models and for attribute-inference attacks.

Key limitations

This is a risk analysis, not a clinical-impact study. It did not show improvement or harm in patient outcomes. The abstract does not establish complete train-on-one/test-on-another validation or robustness to stronger attackers. Insurance type may encode US-specific social inequities.

What this means in practice

Embeddings should be treated as sensitive data, with patient-level splits, independent testing, subgroup audits, access control, provenance documentation, and explicit attribute-inference assessment.

Source

IEEE Journal of Biomedical and Health Informatics, 2026. DOI: https://doi.org/10.1109/JBHI.2026.3731408 PubMed: https://pubmed.ncbi.nlm.nih.gov/42696629/

Educational material; it does not replace individual medical advice.

Autor: prof. dr hab. n. med. Krzysztof Łukaszuk