Data swapping, a term introduced in 1978 by Dalenius and Reiss for a new method of statistical disclosure protection in confidential data bases, has taken on new meanings and been linked to new statistical methodologies over the intervening twenty-five years. This paper revisits the original (1982) published version of the the Dalenius-Reiss data swapping paper and then traces the developments ...

Traditionally, statistical agencies generally release outputs in the form of microdata and tabular data. Microdata contain data from social surveys and tabular data contain either frequency counts, such as for census dissemination, or magnitude data typically arising from business surveys, eg. total revenue. For each of these traditional outputs, there has been much research on how to quantify ...

Re-identification is a major privacy threat to public datasets containing individual records. Many privacy protection algorithms rely on generalization and suppression of “quasiidentifier" attributes such as ZIP code and birthdate. Several anonymization techniques, such as generalization and bucketization, have been designed for privacy preserving micro data publishing. Recent work has shown th...

In this paper we examine the behavior of a firm that produces a product with a privatelyobserved safety attribute; that is, consumers cannot observe directly the product’s safety. The firm may, at a cost, disclose its safety prior to sale; alternatively, if a firm does not disclose its safety then consumers can attempt to infer its safety from the price charged. The liability system is importan...

The disclosure of confidential patient data without an individual's explicit consent should be for purposes that persons have reason to both expect and accept. We do not currently have the required level of clarity or consistency in understanding regarding the disclosure of confidential patient information for public health purposes to support effective public dialogue. The Health Service (Cont...

The debate regarding the nature of an individual’s privacy rights have increasingly centred on the threats posed by technological advances and the disclosure of personally identifiable information (PII). However, the disclosure of PII is often affected by the degree of privacy appetite of individuals. This is often dependent on their understanding of the efficacy of privacy enabling technologie...

disclosure of classified public interest information has become one of the major legal challenges in recent years. in the past decades the conflict between the right of people to receive information and principle of sovereignty within the framework of traditional media (direct broadcast satellite) resolved in favor of  principle of free flow of information and the said conflict was replaced by ...

Mobile applications increasingly use personalization, to maximize the relevance of displayed content and to simplify the user interaction. However, disclosing the personal information that is required for personalization makes many users feel uncomfortable. It is believed that empowering users to make their own privacy decisions by giving them adequate notifications and disclosure controls woul...