Anonymization procedures for tabular data: an explanatory technical and legal synthesis

  • In the European Union, Data Controllers and Data Processors, who work with personal data, have to comply with the General Data Protection Regulation and other applicable laws. This affects the storing and processing of personal data. But some data processing in data mining or statistical analyses does not require any personal reference to the data. Thus, personal context can be removed. For these use cases, to comply with applicable laws, any existing personal information has to be removed by applying the so-called anonymization. However, anonymization should maintain data utility. Therefore, the concept of anonymization is a double-edged sword with an intrinsic trade-off: privacy enforcement vs. utility preservation. The former might not be entirely guaranteed when anonymized data are published as Open Data. In theory and practice, there exist diverse approaches to conduct and score anonymization. This explanatory synthesis discusses the technical perspectives on the anonymization ofIn the European Union, Data Controllers and Data Processors, who work with personal data, have to comply with the General Data Protection Regulation and other applicable laws. This affects the storing and processing of personal data. But some data processing in data mining or statistical analyses does not require any personal reference to the data. Thus, personal context can be removed. For these use cases, to comply with applicable laws, any existing personal information has to be removed by applying the so-called anonymization. However, anonymization should maintain data utility. Therefore, the concept of anonymization is a double-edged sword with an intrinsic trade-off: privacy enforcement vs. utility preservation. The former might not be entirely guaranteed when anonymized data are published as Open Data. In theory and practice, there exist diverse approaches to conduct and score anonymization. This explanatory synthesis discusses the technical perspectives on the anonymization of tabular data with a special emphasis on the European Union’s legal base. The studied methods for conducting anonymization, and scoring the anonymization procedure and the resulting anonymity are explained in unifying terminology. The examined methods and scores cover both categorical and numerical data. The examined scores involve data utility, information preservation, and privacy models. In practice-relevant examples, methods and scores are experimentally tested on records from the UCI Machine Learning Repository’s “Census Income (Adult)” dataset.show moreshow less

Download full text files

Export metadata

Statistics

Number of document requests

Additional Services

Share in Twitter Search Google Scholar
Metadaten
Author:Robert Aufschläger, Jakob Folz, Elena MärzGND, Johann GuggumosGND, Michael Heigl, Benedikt BuchnerORCiDGND, Martin Schramm
URN:urn:nbn:de:bvb:384-opus4-1086946
Frontdoor URLhttps://opus.bibliothek.uni-augsburg.de/opus4/108694
ISSN:2078-2489OPAC
Parent Title (English):Information
Publisher:MDPI AG
Type:Article
Language:English
Date of first Publication:2023/09/01
Publishing Institution:Universität Augsburg
Release Date:2023/10/26
Tag:Information Systems
Volume:14
Issue:9
First Page:487
DOI:https://doi.org/10.3390/info14090487
Institutes:Juristische Fakultät
Juristische Fakultät / Institut für Zivilrecht
Juristische Fakultät / Institut für Zivilrecht / Lehrstuhl für Bürgerliches Recht, Haftungsrecht und Recht der Digitalisierung
Dewey Decimal Classification:3 Sozialwissenschaften / 34 Recht / 340 Recht
Licence (German):CC-BY 4.0: Creative Commons: Namensnennung (mit Print on Demand)