Part of A guide to confidentiality in health and social care: references
Section 12: Anonymisation guidance
There are various technical processes that can be used to transform data to make it less likely that individuals can be identified. It must be stressed that
- the use of any particular technique does not guarantee “anonymity” of the data; and
- the extent to which data are effectively anonymised is context-dependent
Techniques may reduce the risk of identification, but there must be a separate assessment of whether the reduced risk is acceptable in particular circumstances and whether the technical process constitutes “effective anonymisation” if this is required.
It should also be noted that even where it is legally permissible to use person identifiable information, its use should be minimised, for example by only sending a relevant subset of the information, or by the use of one or more of the techniques described in guidance.
The Information Standards Board (ISB) Anonymisation Standard 33 outlines techniques on making data less identifiable and on when it is safe to publish data and disclose information for Freedom of Information purposes.
The Information Commissioner has published the Anonymisation: managing data protection risk code of practice.
The Office of National Statistics has published statistical guidance and methodology.
Last edited: 17 January 2022 1:36 pm