From the course: CompTIA CySA+ (CS0-002) Cert Prep: 7 Compliance and Assessment
Unlock the full course today
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Data anonymization
From the course: CompTIA CySA+ (CS0-002) Cert Prep: 7 Compliance and Assessment
Data anonymization
- [Instructor] One way that many organizations seek to protect themselves against accidental disclosures of personal information is to remove all identifying information from datasets before placing them in the cloud. De-identification is the process of moving through a dataset and removing data that may be individually identifying. For example, you would certainly want to remove names, Social Security numbers, and other obvious identifiers. However, simple data de-identification is often insufficient to completely safeguard information. The reason for this is that you can often combine seemingly innocuous fields to uniquely identify an individual. A study done at Carnegie Mellon University analyzed three fields commonly retained in de-identified datasets, zip codes, dates of birth, and genders. You wouldn't think that any one of these fields when used alone would allow you to identify someone. After all, a lot of people live…