Multiple imputation for sharing precise geographies in public use data

Annals of Applied Statistics

Volumn 4, Issue 1, 2010, Pages 229-252

  Wang, Hao ^a   Reiter, Jerome P ^a  

^a NONE

Author keywords

Confidentiality; Disclosure; Dissemination; Spatial; Synthetic; Tree

Indexed keywords

EID: 84870271117     PISSN: 19326157     EISSN: 19417330     Source Type: Journal    
DOI: 10.1214/11-AOAS506     Document Type: Article

References (40)

1. Armstrong, M. P., Rushton, G. and Zimmerman, D. L. (1999). Geographically masking health data to preserve confidentiality. Stat. Med. 18 495-525.
2. Banerjee, S., Gelfand, A. E. and Carlin, B. P. (2004). Hierarchical Modeling and Analysis for Spatial Data. Chapman and Hall/CRC, Boca Raton, FL.
3. Banerjee, S., Gelfand, A. E., Finley, A. O. and Sang, H. (2008). Gaussian predictive process models for large spatial data sets. J. R. Stat. Soc. Ser. B Stat. Methodol. 70 825-848.
4. Breiman, L., Friedman, J. H., Olshen, R. A. and Stone, C. J. (1984). Classification and Regression Trees. Wadsworth, Belmont.
5. Caiola, G. and Reiter, J. P. (2010). Random forests for generating partially synthetic, categorical data. Trans. Data Priv. 3 27-42.
6. Chipman, H. A., George, E. I. and McCulloch, R. E. (2010). BART: Bayesian additive regression trees. Ann. Appl. Stat. 4 266-298.
7. Dalenius, T. and Reiss, S. P. (1982). Data-swapping: A technique for disclosure control. J. Statist. Plann. Inference 6 73-85.
8. De'ath, G. (2002). Multivariate regression trees: A new technique for modeling species environment relationships. Ecology 83 1105-1117.
9. Drechsler, J. (2011). New data dissemination approaches in old Europe-Synthetic datasets for a German establishment survey. J. Appl. Stat. To appear.
10. Drechsler, J. and Reiter, J. P. (2008). Accounting for intruder uncertainty due to sampling when estimating identification disclosure risks in partially synthetic data. In Privacy in Statistical Databases (LNCS 5262) (J. Domingo-Ferrer and Y. Saygin, eds.) 227-238. Springer, New York.
11. Drechsler, J. and Reiter, J. P. (2010). Sampling with synthesis: A new approach for releasing public use census microdata. J. Amer. Statist. Assoc. 105 1347-1357.
12. Duncan, G. T. and Lambert, D. (1989). The risk of disclosure for microdata. Journal of Business and Economic Statistics 7 207-217.
13. Federal Register (2000). Standards for privacy of individually identifiable health information-Final privacy rule. 45 C. F. R. Parts 160 and 164, Dept. Health and Human Services, Office of the Secretary, Washington, DC.
14. Fienberg, S. E., Makov, U. E. and Sanil, A. P. (1997). A Bayesian approach to data disclosure: Optimal intruder behavior for continuous data. Journal of Official Statistics 13 75-89.
15. Fienberg, S. E. and McIntyre, S. E. (2004). Data swapping: Variations on a theme by Dalenius and Reese. In Privacy in Statistical Databases (J. Domingo-Ferrer and V. Torra, eds.) 14-29. Springer, New York.
16. Freedman, D. A. (2004). The ecological fallacy. In Encyclopedia of Social Science Research Methods (M. Lewis-Beck, A. Bryman and T. F. Liao, eds.) 1 293. Sage, Thousand Oaks, CA.
17. Fuller, W. A. (1993). Masking procedures for microdata disclosure limitation. Journal of Official Statistics 9 383-406.
18. Gomatam, S., Karr, A. F., Reiter, J. P. and Sanil, A. P. (2005). Data dissemination and disclosure limitation in a world without microdata: A risk-utility framework for remote access analysis servers. Statist. Sci. 20 163-177.
19. Health and Retirement Study (2007). Data Description and Usage (2006 Core, Early, Version 2.0). Available at http://hrsonline.isr.umich.edu/meta/2006/core/desc/h06dd.pdf.
20. Kinney, S. K., Reiter, J. P., Reznek, A. P., Miranda, J., Jarmin, R. S. and Abowd, J. M. (2011). Towards unrestricted public use business microdata: The synthetic Longitudinal Business Database. Technical report, Center for Economic Studies Working Paper CES-WP-11-04, Census Bureau, Washington, DC.
21. Little, R. J. A. (1993). Statistical analysis of masked data. Journal of Official Statistics 9 407-426.
22. Little, R. J. A., Liu, F. and Raghunathan, T. E. (2004). Statistical disclosure techniques based on multiple imputation. In Applied Bayesian Modeling and Causal Inference from Incomplete-Data Perspectives (A. Gelman and X. L. Meng, eds.) 141-152. Wiley, New York.
23. Machanavajjhala, A., Kifer, D., Abowd, J., Gehrke, J. and Vilhuber, L. (2008). Privacy: Theory meets practice on the map. In IEEE 24th International Conference on Data Engineering 277-286.
24. National Research Council (2005). Expanding access to research data: Reconciling risks and opportunities. Panel on Data Access for Research Purposes, Committee on National Statistics, Division of Behavioral and Social Sciences and Education. The National Academies Press, Washington, DC.
25. National Research Council (2007). Putting people on the map: Protecting confidentiality with linked social-spatial data. Panel on Confidentiality Issues Arising from the Integration of Remotely Sensed and Self-Identifying Data, Committee on the Human Dimensions of Global Change, Division of Behavioral and Social Sciences and Education. The National Academies Press, Washington, DC.
26. Reiter, J. P. (2003). Inference for partially synthetic, public use microdata sets. Survey Methodology 29 181-189.
27. Reiter, J. P. (2004a). New approaches to data dissemination: A glimpse into the future (?). Chance 17 11-15.
28. Reiter, J. P. (2004b). Simultaneous use of multiple imputation for missing data and disclosure limitation. Survey Methodology 30 235-242.
29. Reiter, J. P. (2005a). Estimating identification risks in microdata. J. Amer. Statist. Assoc. 100 1103-1113.
30. Reiter, J. P. (2005b). Releasing multiply imputed, synthetic public use microdata: An illustration and empirical study. J. Roy. Statist. Soc. Ser. A 168 185-205.
31. Reiter, J. P. (2005c). Significance tests for multi-component estimands from multiply imputed, synthetic microdata. J. Statist. Plann. Inference 131 365-377.
32. Reiter, J. P. (2005d). Using CART to generate partially synthetic, public use microdata. Journal of Official Statistics 21 441-462.
33. Reiter, J. P. (2009). Using multiple imputation to integrate and disseminate confidential microdata. International Statistical Review 77 179-195.
34. Reiter, J. P. and Mitra, R. (2009). Estimating risks of identification disclosure in partially synthetic data. Journal of Privacy and Confidentiality 1 99-110.
35. Robinson, W. S. (1950). Ecological correlations and the behavior of individuals. American Sociological Review 15 351-357.
36. Rubin, D. B. (1981). The Bayesian bootstrap. Ann. Statist. 9 130-134.
37. Sweeney, L. A. (2001). Computational disclosure control: A primer on data privacy protection. Ph.D. thesis, MIT, Cambridge, MA.
38. VanWey, L. K., Rindfuss, R. R., Guttman, M. P., Entwisle, B. and Balk, D. L. (2005). Confidentiality and spatially explicit data: Concerns and challenges. Proc. Natl. Acad. Sci. USA 102 15337-15342.
39. Wang, H. and Reiter, J. (2011). Supplement to "Multiple imputation for sharing precise geographies in public use data". DOI:10.1214/11-AOAS506SUPP.
40. Zhou, Y., Dominici, F. and Louis, T. A. (2010). A smoothing approach for masking spatial data. Ann. Appl. Stat. 4 1451-1475.