Guidance on evaluating a privacy protection technique for the AI era

Here's a tricky situation: A business that sells fitness trackers to consumers has amassed a large database of health data about its customers. Researchers would like access to this information to improve medical diagnostics. While the business is concerned about sharing such sensitive, private information, it also would like to support this important research. So how do the researchers obtain useful and accurate information that could benefit society while also keeping individual privacy intact?

access business consumers customers data database fitness guidance health health data information large medical privacy private protection researchers security sensitive sharing trackers