De-Identification - Revision history

Dahaddican at 22:24, 19 January 2020

2020-01-19T22:24:08Z

← Older revision		Revision as of 22:24, 19 January 2020
Line 11:		Line 11:
	****[[File & Folder Naming Conventions]]		****[[File & Folder Naming Conventions]]
	****[[Double-Zipping Files and Folders]]		****[[Double-Zipping Files and Folders]]
	*****[[Instructions on how to Zip ~~and Encrypt a file or folder~~]]		*****[[Instructions on how to Double-Zip]]
	***[[Collection of Data]]		***[[Collection of Data]]

Dahaddican at 02:20, 16 January 2020

2020-01-16T02:20:08Z

← Older revision		Revision as of 02:20, 16 January 2020
Line 10:		Line 10:
	****[[Preferred Deposit Formats]]		****[[Preferred Deposit Formats]]
	****[[File & Folder Naming Conventions]]		****[[File & Folder Naming Conventions]]
	****[[Zipping ~~and Encrypting~~ Files and Folders]]		****[[Double-Zipping Files and Folders]]
	*****[[Instructions on how to Zip and Encrypt a file or folder]]		*****[[Instructions on how to Zip and Encrypt a file or folder]]
	***[[Collection of Data]]		***[[Collection of Data]]

Dahaddican at 00:32, 18 September 2019

2019-09-18T00:32:06Z

← Older revision		Revision as of 00:32, 18 September 2019
Line 10:		Line 10:
	****[[Preferred Deposit Formats]]		****[[Preferred Deposit Formats]]
	****[[File & Folder Naming Conventions]]		****[[File & Folder Naming Conventions]]
	****[[~~Double-~~Zipping Files and Folders]]		****[[Zipping and Encrypting Files and Folders]]
	*****[[Instructions on how to ~~Double-~~Zip a file or folder]]		*****[[Instructions on how to Zip and Encrypt a file or folder]]
	***[[Collection of Data]]		***[[Collection of Data]]

Dahaddican at 23:02, 26 August 2019

2019-08-26T23:02:00Z

← Older revision		Revision as of 23:02, 26 August 2019
Line 1:		Line 1:
			*[[2. Deposit Preparation]]
			**[[Collect and Prepare Data File(s)]]
			***[[Preparation of Data]]
			****[[The Privacy Act 1988]]
			****[[De-Identification]]
			****[[Primary Risks Associated with Data Breach]]
			****[[Common Disclosure Risk Factors]]
			****[[Data Protections]]
			****[[Data Treatment Techniques]]
			****[[Preferred Deposit Formats]]
			****[[File & Folder Naming Conventions]]
			****[[Double-Zipping Files and Folders]]
			*****[[Instructions on how to Double-Zip a file or folder]]
			***[[Collection of Data]]

	As has been mentioned, [[Glossary of Terms\|De-identification]] is considered context dependent. Information of any type, including data, may be [[Glossary of Terms\|de-identified]] in one context but [[Glossary of Terms\|Personal Information]] in another. As an example, a vehicle license number in isolation and in the absence of any other information to a random member of the public is not [[Glossary of Terms\|Personal Information]]. If this number were held by an employee of a registry agency that had access to a database where the license number could be looked up, it could help to identify other details associated with the individual and would therefore be considered a [[Glossary of Terms\|Direct Identifier]].		As has been mentioned, [[Glossary of Terms\|De-identification]] is considered context dependent. Information of any type, including data, may be [[Glossary of Terms\|de-identified]] in one context but [[Glossary of Terms\|Personal Information]] in another. As an example, a vehicle license number in isolation and in the absence of any other information to a random member of the public is not [[Glossary of Terms\|Personal Information]]. If this number were held by an employee of a registry agency that had access to a database where the license number could be looked up, it could help to identify other details associated with the individual and would therefore be considered a [[Glossary of Terms\|Direct Identifier]].

Line 18:		Line 33:

	Correct Data [[Glossary of Terms\|de-identification]] provides a number of benefits, including satisfying the Privacy Act 1988 APP's by protecting the privacy of individuals, organisations and entities. It therefore increases the opportunity to safely share and reuse the data, reduces the risk of breaches, builds trust, and meets the expectations of [[Glossary of Terms\|Data Owners]] regarding the handling of their data.		Correct Data [[Glossary of Terms\|de-identification]] provides a number of benefits, including satisfying the Privacy Act 1988 APP's by protecting the privacy of individuals, organisations and entities. It therefore increases the opportunity to safely share and reuse the data, reduces the risk of breaches, builds trust, and meets the expectations of [[Glossary of Terms\|Data Owners]] regarding the handling of their data.

	~~= Next Page =~~
	*[[Primary Risks Associated with Data Breach]]

	~~= Previous Page =~~
	*[[The Privacy Act 1988]]

	~~== Next Section ==~~
	*[[Creation of 'Shell Dataverse & Dataset']]

	~~== Previous Section ==~~
	* [[ADA Collection Policy Criteria Assessment]]

Dahaddican: Created page with "As has been mentioned, De-identification is considered context dependent. Information of any type, including data, may be Glossary of Terms|de-identifi..."

2019-08-26T21:46:26Z

Created page with "As has been mentioned, De-identification is considered context dependent. Information of any type, including data, may be Glossary of Terms|de-identifi..."

New page

As has been mentioned, [[Glossary of Terms|De-identification]] is considered context dependent. Information of any type, including data, may be [[Glossary of Terms|de-identified]] in one context but [[Glossary of Terms|Personal Information]] in another. As an example, a vehicle license number in isolation and in the absence of any other information to a random member of the public is not [[Glossary of Terms|Personal Information]]. If this number were held by an employee of a registry agency that had access to a database where the license number could be looked up, it could help to identify other details associated with the individual and would therefore be considered a [[Glossary of Terms|Direct Identifier]].

With this in mind, although the Privacy Act 1988 APP’s are not normally applicable for [[Glossary of Terms|de-identified]] information or data, some APP’s continue to be relevant based upon the potential for transfer to another environment. These are not as a matter of law, but should be considered as a matter of risk management in preventing potential [[Glossary of Terms|re-identification]] where it is expected that the information could become a [[Glossary of Terms|Direct Identifier]] in the possession of others.

The term [[Glossary of Terms|de-identification]] is used by the ADA in a broader sense, and is consistent with the meaning in the Privacy Act 1988. It is important to be aware that [[Glossary of Terms|de-identification]] involves:
* the removal or alteration of all [[Glossary of Terms|Direct Identifiers]], followed by
* the addition of other data controls to remove, obscure, aggregate, alter and/or protect the data in some way so that it is no longer possible to reasonably identify an individual, organisation or entity, or any characteristics about them.

The removal of [[Glossary of Terms|Direct Identifiers]], such as an individual’s name, address or other directly identifying information is relatively straightforward. The second step is arguably more challenging and requires the removal or alteration of other information that may allow an individual or their characteristics to be [[Glossary of Terms|re-identified]] (for example, the removal or alteration of a rare characteristic of an individual or a combination of unique or remarkable characteristics that enable [[Glossary of Terms|re-identification]]), and/or the addition of controls and safeguards in the data access environment, which will manage the risk of [[Glossary of Terms|re-identification]].

Unfortunately, it is often a blurred line between [[Glossary of Terms|de-identified]] information and [[Glossary of Terms|Personal Information]] and to assess if something is reasonably [[Glossary of Terms|de-identified]] is not an exact science. A number of things need to be considered, including the nature and amount of information, who will hold the information and who will have access to it, the combined effect of any other information being available to the user and finally the practicability of using that information to identify an individual. The term reasonably [[Glossary of Terms|de-identified]] means that where it is possible to identify an individual, objectively speaking, is it likely when considering all of the above factors. It may be technically possible to identify an individual but highly unlikely. Whereas an individual will be reasonably identifiable (or the de-identification process will not have been successful) if it is technically possible for [[Glossary of Terms|re-identification]] to occur, and there is a reasonable likelihood of it occurring.

When using this approach and determining if [[Glossary of Terms|de-identification]] is appropriate, the [[Glossary of Terms|Data Owner]] should consider the type of information or data that is to be [[Glossary of Terms|de-identified]], who is likely to be granted access to the data in the future, whether the information contains unique or uncommon characteristics that could enable [[Glossary of Terms|re-identification]], whether the information or data will be targeted for [[Glossary of Terms|re-identification]] because of who or what it relates to, whether there is other information or data available that could be matched up or used to help [[Glossary of Terms|re-identify]] the [[Glossary of Terms|de-identified]] data, and what harm may result if the information or data is [[Glossary of Terms|re-identified]]. Choosing appropriate [[Data Protections|Data protection]] techniques for the data and combining these with other [[Data Sharing Principles]] will help to ensure that the balance between data utility and data modification is correct. On some occasions there will be an unavoidable trade-off in order to share data widely ([[Glossary of Terms|Open Data]]), requiring the information or data to be altered significantly. In other cases the modification of the data may be minimal, requiring more rigid controls and safeguards to be applied elsewhere. This is a legal and ethical requirement placed upon [[Glossary of Terms|Data Owners]] and [[Glossary of Terms|Data Custodians]], and failure to achieve [[Glossary of Terms|de-identification]] will lead to a confidentiality [[Primary Risks Associated with Data Breach|breach]] or [[Glossary of Terms|disclosure]].

Information on some suitable methods for [[Data Protections|Data Protection]] can be found on the next page.

= The Importance and Benefits of De-Identification =

Correct Data [[Glossary of Terms|de-identification]] provides a number of benefits, including satisfying the Privacy Act 1988 APP's by protecting the privacy of individuals, organisations and entities. It therefore increases the opportunity to safely share and reuse the data, reduces the risk of breaches, builds trust, and meets the expectations of [[Glossary of Terms|Data Owners]] regarding the handling of their data.

= Next Page =
*[[Primary Risks Associated with Data Breach]]

= Previous Page =
*[[The Privacy Act 1988]]

== Next Section ==
*[[Creation of 'Shell Dataverse & Dataset']]

== Previous Section ==
* [[ADA Collection Policy Criteria Assessment]]