Privacy-Preserving Matching for Federated Causal Inference in Multicentre Patient Cohorts
Authors:
- Roy GusinowRoy Gusinow
- Andrei Scott MorganAndrei Scott Morgan
- Lorenzo Maria CanzianiLorenzo Maria Canziani
- Jennifer ZeitlinJennifer Zeitlin
- Mihyeon KimMKMihyeon Kim
- Elisa GentilottiElisa Gentilotti
- Jade GhosnJade Ghosn
- Adriana TamiAdriana Tami
- Alice ToschiATAlice Toschi
- Zaira R. Palacios-BaenaZaira R. Palacios-Baena
- Evelina TacconelliEvelina Tacconelli
Preprint
Abstract
Motivation: Causal effect estimates can often be biased in clinical and epidemiological studies as patient cohorts frequently exhibit substantial covariate imbalances between treated and control groups, often amplified in multicentre studies due to heterogeneous recruitment, clinical practice, and case mix. Covariate balancing methods are therefore essential for valid causal inference. However, their application becomes challenging when data are distributed across cohorts and cannot be pooled because of privacy, legal, or institutional constraints, leaving a gap in practical methods for causal effect estimation in federated and imbalanced clinical data settings. Results: We develop a privacy-preserving framework for covariate balancing and causal effect estimation across distributed data providers, combining federated aggregation with differential privacy to enable propensity score subclassification and matching without sharing individual-level records. Matching relies on non-disclosive quantities and differentially private distance evaluation, and the resulting matched subsets remain local to each server. Balance can be assessed through federated diagnostics and privacy-preserving visualisations, and we provide secure estimators for average treatment effects with associated uncertainty quantification. We implement this framework in the DataSHIELD federated analysis platform via 2 R packages. In simulations, we demonstrate agreement between federated and centralised analyses in the absence of privacy noise and quantify the bias–variance trade-offs induced by differential privacy. We illustrate applicability in two multinational settings—a Long COVID cohort and very preterm birth cohorts—showing that the approach enables practical causal analyses under real-world data protection constraints. Availability and Implementation: The DataSHIELD packages are available on Github ( https://github.com/roygusinow/dsMatchingClient , https://github.com/roygusinow/dsMatching ). Additional methodological details are provided in the Supplementary Material. Contact: Jan Hasenauer: jan.hasenauer@uni-bonn.deKeywords
Funding Information
- Deutsche Forschungsgemeinschaft (EXC 2047—390685813)
- Deutsche Forschungsgemeinschaft (EXC 2151-390873048)
- Horizon Europe research and innovation programme (101016167)
- Horizon Europe research and innovation programme (733280)
This publication has 32 references indexed in Scilit:
- Federated causal inference in heterogeneous observational dataStatistics in Medicine, 2023
- Clinical phenotypes and quality of life to define post-COVID-19 syndrome: a cluster analysis of the multinational, prospective ORCHESTRA cohorteClinicalMedicine, 2023
- Remove obstacles to sharing health data with researchers outside of the European UnionNature Medicine, 2021
- Swarm Learning for decentralized and confidential clinical machine learningNature, 2021
- Robust Post-Matching InferenceJournal of the American Statistical Association, 2021
- G-computation, propensity score-based methods, and targeted maximum likelihood estimator for causal inference with different covariates sets: a comparative simulation studyScientific Reports, 2020
- Multiple imputation by chained equations: what is it and how does it work?International Journal of Methods in Psychiatric Research, 2011
- Some Methods of Propensity‐Score Matching had Superior Performance to Others: Results of an Empirical Investigation and Monte Carlo simulationsBiometrical Journal, 2009
- The rand 36‐item health survey 1.0Health Economics, 1993
- Reducing Bias in Observational Studies Using Subclassification on the Propensity ScoreJournal of the American Statistical Association, 1984