Data which relate to a living individual who can be identified: From those data, or from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller. Other legislation and jurisdictions do not concern themselves with whether the individuals are living.

1. Anonymisation: theory
and practice
Mark Elliot
Manchester University
UK Anonymisation Network
www.ukanon.net

2. The Anonymisation Decision
Making Framework

3. What is the ADMF?
• A system for developing anonymisation policy.
• A practical tool for understanding your data
situation.
• Not a checklist.

4. Your responsibility
1. Understand how a privacy breach might
occur.
2. Understand the possible consequences of the
breach.
3. Reduce the risk of a breach occurring to a
negligible level.

5. 10 point process
1. Describe your data situation
2. Understand the legal and governance issues
3. Know your data
4. Understand the use case
5. Meet your ethical obligations
6. Identify the processes you will use to assess disclosure risk
7. Identify the disclosure control processes that are relevant to your
data situation
8. Identify who your stakeholders are and plan how you will
communicate
9. Plan what happens next once you have shared or released the
data
10. Plan what you will do if things go wrong

6. Data Situation Audit
1. Describe your data situation
2. Understand the legal and governance issues
3. Know your data
4. Understand the use case
5. Meet your ethical obligations