Are You Really Anonymous? The Hidden Clues in "De-Identified" Personal Data

We often hear about the importance of protecting our personal data online, especially sensitive data like our health records. And there's a sense of relief when we're told that this data is "anonymised" – stripped of direct identifiers like names and addresses. But what if that feeling of security is a comfortable illusion? What if seemingly harmless pieces of information, when pieced together, could still reveal you?

This is the often-overlooked danger of indirect identification, and it's a concept we need to understand to truly protect our privacy in an increasingly data-driven world.

Think of your personal data as individual pieces of a puzzle. On their own, a single piece might not reveal much. Your age? Lots of people share that. Your general location? Millions reside in the same area. Even a specific medical condition, while more unique, could still apply to a number of individuals.

The Danger of Putting the Pieces Together

The problem arises when these seemingly innocuous pieces of the puzzle start to connect. Imagine this scenario:

• Piece 1: Age: A data record indicates the individual is 55 years old.

• Piece 2: Location: The record specifies they live in a particular suburb of London.

• Piece 3: Health Condition: The record notes a history of a rare heart condition.

  
  

Suddenly, this "anonymous" record paints a much more specific picture. While each individual piece of information might not identify someone on its own, the combination dramatically narrows down the possibilities.

The Final Reveal: Adding Publicly Available Information

Now, let's introduce another layer – the vast amount of publicly available data that exists in our digital world.

• Electoral Rolls: Publicly accessible electoral registers could potentially link a name to that specific London suburb and age range.

• Social Media: A quick search on social media platforms might reveal individuals in that age group, living in that area, who have mentioned or shown interest in topics related to that rare heart condition.

• Professional Registries: Depending on the individual's profession, publicly available registries might contain age and location information.

  
  

Suddenly, the "de-identified" personal data (health record), when cross-referenced with these external data sources, could very well point directly back to a specific individual. The comfort we took in the removal of direct identifiers vanishes as we realize how easily we can be re-identified through these indirect clues.