A framework for evaluating the utility of data altered to protect confidentiality

American Statistician

Volumn 60, Issue 3, 2006, Pages 224-232

  Karr, A F ^a   Kohnen, C N ^b   Oganian, A ^a   Reiter, J P ^c   Sanil, A P ^d  

^a NATIONAL INSTITUTE OF ENVIRONMENTAL HEALTH SCIENCES   (United States)

^b ST OLAF COLLEGE   (United States)

^c DUKE UNIVERSITY   (United States)

^d BRISTOL MYERS SQUIBB   (United States)

Author keywords

Confidentiality; Disclosure; Disclosure risk; Microdata; Record linkage; Statistical disclosure limitation; Utility

Indexed keywords

EID: 33747456679     PISSN: 00031305     EISSN: None     Source Type: Journal    
DOI: 10.1198/000313006X124640     Document Type: Article

References (40)

1. Anwar, N. (1993). "Micro-Aggregation - The Small Aggregates Method," Research Report.
2. Brand, R. (2002), "Microdata Protection Through Noise," in Inference Control in Statistical Databases (vol. 2316), eds. J. Domingo-Ferrer, Berlin: Springer-Verlag, Berlin, pp. 97-116.
3. Chaloner, K. (1984), "Optimal Bayesian Experimental Design for Linear Models," The Annals of Statistics, 12, 283-300.
4. Dalenius, T., and Reiss, S. P. (1982), "Data-Swapping: A Technique for Disclosure Control," Journal of Statistical Planning and Inference, 6, 73-85.
5. Defays, D., and Anwar, N. (1995), "Micro-Aggregation: A Generic Method," in Proceedings of the 2nd International Symposium on Statistical Confidentiality, Luxembourg: Office for Official Publications of the European Community, pp. 69-78.
6. Defays, D., and Nanopoulos, P. (1993), "Panels of Enterprises and Confidentiality: The Small Aggregates Method," in Proceedings of the 92 Symposium on Design and Analysis of Longitudinal Surveys, Ottawa: Statistics Canada, pp. 195-204.
7. Dobra, A., Fienberg, S. E., Karr, A. F., and Sanil, A. P. (2002), "Software Systems for Tabular Data Releases," International Journal of Uncertainty, Fuzziness and Knowledge Based Systems, 10, 529-544.
8. Dobra, A., Karr, A. F., and Sanil, A. P. (2003), "Preserving Confidentiality of High-Dimensional Tabular Data: Statistical and Computational Issues," Statistics and Computing, 13, 363-370.
9. Domingo-Ferrer, J., and Mateo-Sanz, J. M. (1999), "On Resampling for Statistical Confidentiality in Contingency Tables," Computers and Mathematics with Applications, 38, 13-32.
10. Domingo-Ferrer, J., Mateo-Sanz, J. M., and Torra, V. (2001), "Comparing SDC Methods for Microdata on the Basis of Information Loss and Disclosure Risk," in Proceedings of the ETK-NTTS 2001, Luxembourg: Eurostat, pp. 807-825.
11. Domingo-Ferrer, J., and Torra, V. (2001), "A Quantitative Comparison of Disclosure Control Methods for Microdata," in Confidentiality, Disclosure and Data Access, eds. P. Doyle, J. Lane, J. Theeuwes, and L. Zayatz, Amsterdam: North-Holland, pp. 111-133.
12. Duncan, G. T., and Fienberg, S. E. (1999), "Obtaining Information While Preserving Privacy: A Markov Perturbation Method for Tabular Data," in Eurostat Statistical Data Protection '98 Lisbon, Luxembourg: Eurostat, pp. 351-362.
13. Duncan, G. T., Fienberg, S. E., Krishnan, R., Padman, R., and Roehrig, S. F. (2001), "Disclosure Limitation Methods and Information Loss for Tabular Data," in Confidentiality, Disclosure and Data Access: Theory and Practical Applications for Statistical Agencies, eds. P. Doyle, J. I. Lane, J. J. M. Theeuwes, and L. V. Zayatz, Amsterdam: Elsevier, pp. 135-166.
14. Duncan, G. T., Keller-McNulty, S. A., and Stokes, S. L. (2004), "Disclosure Risk vs. Data Utility: The R-U Confidentiality Map," Management Science, submitted for publication.
15. Duncan, G. T., and Lambert, D. (1986), "Disclosure-Limited Data Dissemination," Journal of the American Statistical Association, 81, 10-28.
16. _ (1989), "The Risk of Disclosure for Microdata," Journal of Business and Economic Statistics, 1, 207-217.
17. Duncan, G. T., and Pearson, R. W. (1991), "Enhancing Access to Microdata While Protecting Confidentiality: Prospects for the Future," Statistical Science, 6, 219-239.
18. Felligi, I. P., and Sunter, A. B. (1969), "A Theory for Record Linkage," Journal of the American Statistical Association, 64, 1183-1210.
19. Fienberg, S. E., Makov, U. E., and Sanil, A. P. (1997), "A Bayesian Approach to Data Disclosure: Optimal Intruder Behavior for Continuous Data," Journal of Official Statistics, 13, 75-89.
20. Gomatam, S., Karr, A. F., Reiter, J. P., and Sanil, A. P. (2005a), "Data Dissemination and Disclosure Limitation in a World Without Microdata: A Risk-Utility Framework for Remote Access Analysis Servers," Statistical Science, 20, 163-177.
21. Gomatam, S., Karr, A. F., and Sanil, A. P. (2005b), "Data Swapping as a Decision Problem," Journal of Official Statistics, to appear. Available online at www.niss.org/dgii/technicalreports.html.
22. Guttman, I. (1982), Linear Models: An Introduction, New York: Wiley.
23. Heer, G. R. (1993), "A Bootstrap Procedure to Preserve Statistical Confidentiality in Contingency Tables," in Proceedings of the International Seminar on Statistical Confidentiality, ed. D. Lievesley, Luxembourg: Office for Official Publications of the European Community, pp. 261-271.
24. Jaro, M. A. (1989), "Advances in Record-Linkage Methodology as Applied to Matching the 1985 Census of Tampa, Florida," Journal of the American Statistical Association, 84, 414-420.
25. Karr, A. F., Sanil, A. P., and Banks, D. L. (2006), "Data Quality: A Statistical Perspective," Statistical Methodology, 3, 137-173.
26. Kim, J. J. (1986), "A Method for Limiting Disclosure in Microdata Based on Random Noise and Transformation," in Proceedings of the ASA Section on Survey Research Methodology, Alexandria VA: American Statistical Association, pp. 303-308.
27. Kung, H. T., Luccio, F., and Preparata, F. P. (1975), "On Finding the Maxima of a Set of Vectors," Journal of the ACM, 22, 469-476.
28. Lambert, D. (1993), "Measures of Disclosure Risk and Harm," Journal of Official Statistics, 9, 313-331.
29. Little, R. J. A. (1993), "Statistical Analysis of Masked Data," Journal of Official Statistics, 9, 407-426.
30. Moore, R. (1996), "Controlled Data Swapping Techniques for Masking Public use Microdata Sets," U. S. Census Bureau.
31. Oganian, A. (2003), "Security and Information Loss in Statistical Database Protection," Ph.D. thesis, Universitat Politècnica de Catalunya.
32. Raghunathan, T. E., Reiter, J. P., and Rubin, D. B. (2003), "Multiple Imputation for Statistical Disclosure Limitation," Journal of Official Statistics, 19, 1-16.
33. Reiter, J. P. (2005a), "Estimating Identification Risks in Microdata," Journal of the American Statistical Association, 100, 1101-1113.
34. _ (2005b), "Releasing Multiply-Imputed, Synthetic Public use Microdata: An Illustration and Empirical Study," Journal of the Royal Statistical Society, Series A, 168, 185-205.
35. Skinner, C. J., and Elliot, M. J. (2002), "A Measure of Disclosure Risk for Microdata," Journal of the Royal Statistical Society, Series B, 64, 855-867.
36. Sullivan, G., and Fuller, W. A. (1989), "The Use of Measurement Error to Avoid Disclosure," in Proceedings of the ASA Section on Survey Research Methodology, Alexandria, VA: American Statistical Association, pp. 802-807.
37. Tendik, P., and Matloff, N. (1994), "A Modified Random Perturbation Method for Database Security," ACM Transactions on Database Systems, 19, 47-63.
38. Wallman, K. K., and Harris-Kojetin, B. A. (2004), "Implementing the Confidential Information Protection and Statistical Efficiency Act of 2002," Chance, 17, 21-25.
39. Willenborg, L. C. R. J., and de Waal, T. (2001), Elements of Statistical Disclosure Control, New York: Springer-Verlag.
40. Yancey, W. E., Winkler, W. E., and Creecy, R. H. (2002), "Disclosure Risk Assessment in Perturbative Microdata Protection," in Inference Control in Statistical Databases, ed. J. Domingo-Ferrer, Berlin: Springer-Verlag, pp. 135-152.