anonymisation – Privacy Design® / [protecting people by good design, solid security, efficient processes and trusted services] Mon, 29 Jun 2020 06:56:32 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 /wp-content/uploads/2018/02/cropped-favicon-32x32.jpg anonymisation – Privacy Design® / 32 32 publishable_fr_2019-09_right_to_erasure_summarypublic.pdf /2020/06/28/publishable_fr_2019-09_right_to_erasure_summarypublic-pdf/ Sun, 28 Jun 2020 21:46:06 +0000 /2020/06/28/publishable_fr_2019-09_right_to_erasure_summarypublic-pdf/ Continue reading "publishable_fr_2019-09_right_to_erasure_summarypublic.pdf"

]]> Summary Final Decision Art 60
Complaint

No violation

Background information
Date of final decision: 29 August 2019
LSA: FR
CSAs: BE
Legal Reference: Right to erasure (Article 17), Right to object (Article 21)

Decision: No violation
Key words: Right to erasure, Right to object, Anonymisation

Summary of the Decision

Origin of the case
In a complaint filed with the CSA, the complainant alleged that personal data in her email correspondence with the controller was published on the controller’s website without her consent.

Findings
After communicating with the LSA, the controller took action to anonymise the complainant’s first and last names from the correspondence.

Decision
The LSA invited the controller to anonymise the copies of all the letters published on its website.

No further action towards the controller was taken.

—
This text has been converted automatically from the PDF available via
https://edpb.europa.eu/our-work-tools/consistency-findings/register-for-article-60-final-decisions_en
using Apache Tika to allow for a better search. This might result in some characters being mangled.
Please see the original file for the official wording at
https://edpb.europa.eu/sites/edpb/files/article-60-final-decisions/summary/publishable_fr_2019-09_right_to_erasure_summarypublic.pdf

Please see also EDPB Copyright page

]]> Austria DPA: Anonymization as a form of deletion /2019/02/03/austria-dpa-anonymization-as-a-form-of-deletion/ Sun, 03 Feb 2019 22:04:43 +0000 /?p=658 Analysis by David Vasella
http://datenrecht.ch/oesterreichische-datenschutzbehoerde-anonymisierung-von-personendaten-als-form-der-loeschung/

Original document
https://www.ris.bka.gv.at/Dokumente/Dsk/DSBT_20181205_DSB_D123_270_0009_DSB_2018_00/DSBT_20181205_DSB_D123_270_0009_DSB_2018_00.html

]]> Researchers re-identify patients from a de-identified patient data set published by the Australian government /2018/02/21/researchers-re-identify-patients-from-a-de-identified-patient-data-set-published-by-the-australian-government/ Wed, 21 Feb 2018 09:49:39 +0000 /?p=166 Continue reading "Researchers re-identify patients from a de-identified patient data set published by the Australian government"

]]> The Australian government published a de-identified open health data set in the past, which contained the patient data of a subset of the Australian population.  – The de-identification process  involved not just stripping direct identifiers, but also adding some inaccuracies to the data set. However, the data set was still at the person-level.

Researchers have been able to successfully re-identify some patients.

Abstract: With the aim of informing sound policy about data sharing and privacy, we describe successful re-identification of patients in an Australian de-identified open health dataset. As in prior studies of similar datasets, a few mundane facts often suffice to isolate an individual.
Some people can be identified by name based on publicly available information. Decreasing the precision of the unit-record level data, or perturbing it statistically, makes re-identification gradually harder at a substantial cost to utility. We also examine the value of related datasets in improving the accuracy and confidence of re-identification. Our re-identifications were performed on a 10% sample dataset, but a related open Australian dataset allows us to infer with high confidence that some individuals in the sample have been correctly re-identified.
Finally, we examine the combination of the open datasets with some commercial datasets that are known to exist but are not in our possession. We show that they would further increase the ease of re-identification

https://arxiv.org/ftp/arxiv/papers/1712/1712.05627.pdf

]]>