The Personal Data Protection Commission of Singapore has published a new guide that gives a general introduction to the technical aspects of anonymisation. The guide provides information and examples on the concepts and techniques that could be applied to anonymising personal data.
The basic concepts and techniques discussed in this Guide make reference to the terms “data anonymisation”, and “anonymised data”. “Data anonymisation ” refers to the conversion of personal data into “anonymised data” by applying a range of “anonymisation techniques”. “Anonymised data” refers to data that has undergone transformation by anonymisation techniques in combination with assessment of the risk of re - identification. Typically, the process of data anonymisation would be “irreversible“ and the recipient of the anonymised dataset would not be able to recreate the original data. However, there may be cases where the organisation applying the anonymisation retains the ability to recreate the original data from the anonymised data; in such cases, the anonymisation process is “reversible”.
The intent of the Guide is to provide information on techniques that could be applied in anonymising data. It primarily addresses organisations which do not intend to release the anonymised data into the public domain, but who share data with other organisations or entities, where additional administrative and technical controls may be imposed to reduce the risk of unauthorised disclosure o f personal data.
The Guide is for persons who are responsible for data protection within an organisation, without prior knowledge or experience in data anonymisation. A basic mathematical background will be required to understand some of the terminology and concepts used, and a basic understanding of risk management is needed in the application of the techniques .
While the Guide seeks to assist organisations in anonymising personal data, the Commission recognises that there is no “ one size fits all ” solution for organisations. Each organisation should therefore utilise anonymisation approaches that are appropriate for their circumstances.
Access the Guide to Basic Data Anonymisation Techniques here.