Assessment of Disclosure Risk

Before disseminating a data product for public use, a DSO needs to assess the risk of a data snooper compromising confidentiality. In its original form as the source data, a data product typically has unacceptably high disclosure risk. The data product must therefore be transformed to lower the disclosure risk to an acceptable level. We present a variety of methods for statistical disclosure limitation in Chapters 4 and 5, but first we need to understand disclosure risk and have appropriate tools for its assessment.

[1]  Chris J. Skinner,et al.  Estimating the re-identification risk per record in microdata , 1998 .

[2]  Walter Müller,et al.  Identification Risks of Microdata , 1995 .

[3]  D. Dorling,et al.  Statistics in Society , 1998 .

[4]  D. Lambert,et al.  The Risk of Disclosure for Microdata , 1989 .

[5]  Mark Elliot.  DIS: A New Approach to the Measurement of Statistical Disclosure Risk , 2000 .

[6]  Josep Domingo-Ferrer,et al.  Disclosure risk assessment in statistical microdata protection via advanced record linkage , 2003, Stat. Comput..

[7]  Christian P. Robert,et al.  Monte Carlo Statistical Methods , 2005, Springer Texts in Statistics.

[8]  Josep Domingo-Ferrer,et al.  Using Mahalanobis Distance-Based Record Linkage for Disclosure Risk Assessment , 2006, Privacy in Statistical Databases.

[9]  Rupert W. Ford,et al.  A Computational Algorithm for Handling the Special Uniques Problem , 2002, Int. J. Uncertain. Fuzziness Knowl. Based Syst..

[10]  Mark Elliot,et al.  Scenarios of attack: the data intruder's perspective on statistical disclosure risk , 1999 .

[11]  Mark Elliot.  Data Intrusion Simulation: Advances and a Vision for the Future of Disclosure Control , 2001 .

[12]  Mark Elliot,et al.  An Experiment in Naive Bayesian Record Linkage , 2005 .

[13]  Karen McCullagh.  Data Sensitivity: Proposals for Resolving the Conundrum , 2007 .

[14]  Josep Domingo-Ferrer,et al.  Inference Control in Statistical Databases , 2002, Lecture Notes in Computer Science.

[15]  Ivan P. Fellegi,et al.  A Theory for Record Linkage , 1969 .

[16]  Chris J. Skinner,et al.  Record level measures of disclosure risk for survey microdata , 2006 .

[17]  Eric R. Ziegel,et al.  Business survey methods , 1995 .

[18]  R. Benedetti,et al.  Individual Risk of Disclosure Using Sampling Design Information , 2004 .

[19]  Julian Stander,et al.  A Bayesian Hierarchical Model Approach to Risk Estimation in Statistical Disclosure Limitation , 2004, Privacy in Statistical Databases.

[20]  Mark Elliot,et al.  A Measure of Disclosure Risk for Tables of Counts , 2008, Trans. Data Priv..

[21]  William E. Winkler,et al.  Disclosure Risk Assessment in Perturbative Microdata Protection , 2002, Inference Control in Statistical Databases.

[22]  Stefan Bender,et al.  Re-identifying Register Data by Survey Data Using Cluster Analysis: An Empirical Study , 2002, Int. J. Uncertain. Fuzziness Knowl. Based Syst..

[23]  Angela Dale,et al.  The 1991 census user's guide , 1995 .

[24]  C. Skinner,et al.  A measure of disclosure risk for microdata , 2002 .

[25]  G. Paass.  Disclosure Risk and Disclosure Avoidance for Microdata , 1988 .

[26]  M. Elliot.  Data Citizenship: a 21st century solution to a 20th Century problem , 2007 .

[27]  C. Skinner,et al.  The case for samples of anonymized records from the 1991 census. , 1991, Journal of the Royal Statistical Society. Series A,.

[28]  George T. Duncan,et al.  Disclosure Risk vs. Data Utility: The R-U Confidentiality Map , 2003 .

[29]  P. Doyle,et al.  Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies , 2001 .

[30]  Matthew A. Jaro,et al.  Advances in Record-Linkage Methodology as Applied to Matching the 1985 Census of Tampa, Florida , 1989 .

[31]  Natalie Shlomo,et al.  Assessing Identification Risk in Survey Microdata Using Log-Linear Models , 2008 .

[32]  Josep Domingo-Ferrer,et al.  Validating Distance-Based Record Linkage with Probabilistic Record Linkage , 2002, CCIA.

[33]  David S. Johnson,et al.  Computers and Intractability: A Guide to the Theory of NP-Completeness , 1978 .

[34]  C. Skinner,et al.  Special Uniques, Random Uniques and Sticky Populations: Some Counterintuitive Effects of Geographical Detail on Disclosure Risk , 1998 .