The Re-identification Risk of Anonymized Personal Information:Stratified Perspective and Targeted Governance
In most countries,the anonymous rules are generally stipulated to balance the protection and utilization of personal information.In practice,the re-identification risk of anonymized personal information has evolved into a challenge to break the balance of interests of anonymous rules.Anonymity without the complete deletion of identifiers cannot avoid the possibility of the re-identification of personal information,but the existing schemes focus on the systematic reshaping of anonymity rules,leading to the lack of targeted governance measures to re-identification risks.From the perspective of the generation logic of re-identification risk,the scene-dependent characteristics of personal information identification and the flow preset of anonymous information make the anonymity in the de-identification processing relative;algorithm analysis and aggregate data is the inducement of risk generation.Through the perspective of the present situation and origin of identifying risk,it builds a targeted governance path based on the fusion of legal and technology,including using the risk threshold to set an acceptable level of risks,setting protection measures to deal with accidental risks,and ensuring the obligations of controlling risks through the data sharing agreement.