Privacy, accuracy, and consistency too: a holistic solution to contingency table release
Proceedings of the twenty-sixth ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems
Statistical confidentiality: Optimization techniques to protect tables
Computers and Operations Research
PSD'12 Proceedings of the 2012 international conference on Privacy in Statistical Databases
An investigation of model-based microdata masking for magnitude tabular data release
PSD'12 Proceedings of the 2012 international conference on Privacy in Statistical Databases
Confidentialising maps of mixed point and diffuse spatial data
PSD'12 Proceedings of the 2012 international conference on Privacy in Statistical Databases
Hi-index | 0.00 |
Cell suppression for disclosure avoidance has a well-developed theory, unfortunately not sufficiently well known. This leads to confusion and faulty practices. Poor (sometimes seriously flawed) sensitivity rules can be used while inadequate protection mechanisms may release sensitive data. The negative effects on the published information are often exaggerated. An analysis of sensitivity rules will be done and some recommendations made. Some implications of the basic protection mechanism will be explained. A discussion of the information lost from a table with suppressions will be given, with consequences for the evaluation of patterns and of suppression heuristics. For most practitioners, the application of rules to detect sensitive economic data is well understood (although the rules may not be). However, the protection of that data may be an art rather than an application of sound concepts. More misconceptions and pitfalls arise.