ITU

Going Beyond Obscurity: Organizational Approaches to Data Anonymization

Research output: Conference Article in Proceeding or Book/Report chapterArticle in proceedingsResearchpeer-review

View graph of relations

Anonymization is viewed as a solution to over-exposure of personal information in a data-driven society. Yet how organizations apply anonymization techniques to data for regulatory, ethical or commercial reasons remains underexplored. We investigate how such measures are applied in organizations, asking whether anonymization practices are used, what approaches are considered practical and adequate, and how decisions are made to protect the privacy of data subjects while preserving analytical value. Our findings demonstrate that anonymization is applied to data far less pervasively than expected. Organizations that do employ anonymization often view their practices as sensitive and resort to anonymity by obscurity alongside technical means. Rather than being a purely technical question of applying the right algorithms, anonymization in practice is a complex socio-technical process that relies on multi-stakeholder collaborations. Organizational decision-making about appropriate approaches and the management of responsibility can result in workarounds necessary to negotiate the technical complexit
Original languageEnglish
Title of host publicationProceedings of the ACM on Human-Computer Interaction - CSCW
Volume2
PublisherAssociation for Computing Machinery
Publication date2018
DOIs
Publication statusPublished - 2018
SeriesProceedings of the ACM on Human-Computer Interaction - CSCW
ISSN2573-0142
Close

    Research areas

  • anonymization

Downloads

No data available

ID: 83854560