Identity Inference by Correlating Fragmented Data
零散資訊關聯推斷身分
When a dataset the organization considered de-identified is cross-correlated by a model with other public information, allowing some records to be traced back to specific individuals; due to unmitigated control gaps, the original de-identification assessment did not account for such correlation capability, requiring reassessment of all existing de-identification work, triggering compliance exposure and operational reputational costs.
Framework Mappings
Risk Treatment & Implementation Guidance
Validate de-identification with adversarial linkage testing simulating re-identification against public information; Control released field combinations under an information-separation principle to reduce linkage surface; Periodically re-evaluate de-identification as externally available information evolves