Change proposal: Proposal for a 2-state approach

Peter,

I added a proposal for a 2-state approach to the wiki: 
http://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_Deidentification

Proposal by Rob van Eijk dd 3 July 2013

When applying a 2 state approach to data collection and subsequent 
processing, data is considered:

  * Linkable;
  * De-identified.

Data is de-identified when a party, including the party that collected 
the data:

  * has taken reasonable steps to ensure that the data as been deleted, 
modified, aggregated, anonymized, made unlinkable or otherwise 
manipulated in order to achieve a reasonable level of justified 
confidence that the data cannot reasonably be used to infer information 
about, or otherwise be linked to, a particular user, user agent, or 
device. Data may be shared under the obligation to manage the risk of 
re-identification.

Data is not de-identified when a party, including the party that 
collected the data has the ability to link new data to already collected 
data. e.g. raw protocol data or hashed pseudonyms.

Received on Wednesday, 3 July 2013 14:48:45 UTC