Paul Ohm’s article, “Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization,” appears in the August issue of the UCLA Law Review. The abstract:
Computer scientists have recently undermined our faith in the privacy-protecting power of anonymization, the name for techniques that protect the privacy of individuals in large databases by deleting information like names and social security numbers. These scientists have demonstrated that they can often “reidentify” or “deanonymize” individuals hidden in anonymized data with astonishing ease. By understanding this research, we realize we have made a mistake, labored beneath a fundamental misunderstanding, which has assured us much less privacy than we have assumed. This mistake pervades nearly every information privacy law, regulation, and debate, yet regulators and legal scholars have paid it scant attention. We must respond to the surprising failure of anonymization, and this Article provides the tools to do so.
You can read the full article here (pdf). Paul always provide a lot of food for thought.
“anonymity” by kitakitts, Flickr, used under Creative Commons License