New publication on “Anonymization and Risk”

Two great U.S. privacy academics, Ira Rubinstein and Woodrow Hartzog, have released last week their article on anonymization and risk. They articulate the view that perfect anonymization of data sets has failed and that although the process of protecting individuals in shared information remains integral to privacy practice and policy, there is no clear direction for policy. Data protection laws are focused on whether an individual can be “identified” within a given set (since they regulate personal information which is defined as information about an “identifiable individual”). The authors argue that the better locus of data release policy is on the process of minimizing the risk of reidentification and sensitive attribute disclosure. They are of the view that by focusing on process, data release policy can better balance privacy and utility where nearly all data exchanges carry some risk.

Other articles on same or similar topic:
  • Paul Ohm, Associate Professor and Associate Dean for Academic Affairs at the University of Colorado Law School, article on “Sensitive Information”.

This content has been updated on September 1, 2015 at 21 h 06 min.