Abstract
Consider a data holder, such as a hospital or a bank, that has a privately held collection of person-specific, field structured data. Suppose the data holder wants to share a version of the data with researchers. How can a data holder release a version of its private data with scientific guarantees that the individuals who are the subjects of the data cannot be re-identified while the data remain practically useful? The solution provided in this paper includes a formal protection model named k-anonymity and a set of accompanying policies for deployment. A release provides k-anonymity protection if the information for each person contained in the release cannot be distinguished from at least k-1 individuals whose information also appears in the release. This paper also examines re-identification attacks that can be realized on releases that adhere to k-anonymity unless accompanying policies are respected. The k-anonymity protection model is important because it forms the basis on which the real-world systems known as Datafly, μ-Argus and k-Similar provide guarantees of privacy protection.
Keywords
AnonymityComputer securityk-anonymityComputer scienceInternet privacyIdentification (biology)Software deploymentData Protection Act 1998Set (abstract data type)Private information retrievalInformation privacy
Affiliated Institutions
Related Publications
Information revelation and privacy in online social networks
Participation in social networking sites has dramatically increased in recent years. Services such as Friendster, Tribe, or the Facebook allow millions of individuals to create ...
Anarchy, State, and Utopia
Robert Nozicka s Anarchy, State, Utopia is a powerful, philosophical challenge to the most widely held political social positions of our age ---- liberal, socialist conservat...
ape 5.0: an environment for modern phylogenetics and evolutionary analyses in R
Abstract Summary After more than fifteen years of existence, the R package ape has continuously grown its contents, and has been used by a growing community of users. The releas...
Post-Disaster Supply Chain Interdependent Critical Infrastructure System Restoration: A Review of Data Necessary and Available for Modeling
The majority of restoration strategies in the wake of large-scale disasters have focused on short-term emergency response solutions. Few consider medium- to long-term restoratio...
MrBayes 3.2: Efficient Bayesian Phylogenetic Inference and Model Choice Across a Large Model Space
Since its introduction in 2001, MrBayes has grown in popularity as a software package for Bayesian phylogenetic inference using Markov chain Monte Carlo (MCMC) methods. With thi...
Publication Info
- Year
- 2002
- Type
- article
- Volume
- 10
- Issue
- 05
- Pages
- 557-570
- Citations
- 8284
- Access
- Closed
External Links
Social Impact
Altmetric
PlumX Metrics
Social media, news, blog, policy document mentions
Citation Metrics
8284
OpenAlex
Cite This
Latanya Sweeney
(2002).
k-ANONYMITY: A MODEL FOR PROTECTING PRIVACY.
International Journal of Uncertainty Fuzziness and Knowledge-Based Systems
, 10
(05)
, 557-570.
https://doi.org/10.1142/s0218488502001648
Identifiers
- DOI
- 10.1142/s0218488502001648