Which of the following is an example of data anonymization as a means to protect personal data when sharing a database?

Question

Options

• AThe data is encrypted and a key is required to re-identify the data.
• BKey fields are hidden and unmasking is required to access to the data.
• CNames and addresses are removed but the rest of the data is left untouched.
• DThe data is transformed such that re-identification is impossible.

• A
  3% (1)
• B
  3% (1)
• C
  6% (2)
• D
  89% (32)

Explanation

True data anonymization means the transformation is irreversible - re-identification of the individual is impossible. Option A describes encryption with a key, which is reversible pseudonymization. Option B describes masking with an unmasking capability, also reversible. Option C (removing names and addresses) is incomplete - other remaining fields may still allow re-identification through correlation attacks. Only option D meets the legal and technical definition of anonymization, which is why regulations like GDPR exempt properly anonymized data from their scope.

No community discussion yet for this question.