De-identification and anonymization: legal and technical approaches

Authors

  • Sardor Mamanazarov Tashkent State University of Law

Keywords:

data protection, anonymization, de-identification, personal data, law, data confidentiality, differential privacy, re-identification.

Abstract

This study analyzes legal and technical approaches to data de-identification and anonymization, motivated by the need to develop balanced standards that preserve privacy without stifling beneficial data uses. Doctrinal and technical literature review methods examine provisions in major data protection laws worldwide, including the EU's GDPR, US HIPAA, and emerging frameworks in China, India, and Uzbekistan, alongside mathematical models like differential privacy and k-anonymity. The legal analysis reveals common themes like flexible research exemptions for anonymized data and calibrating standards based on sensitivity, but also gaps such as ambiguities around pseudonymization. The technical review highlights the strengths and weaknesses of encryption, perturbation, generalization, and federation techniques, emphasizing the need to complement mathematical methods with governance controls. Key findings include the importance of allowing contextual optimization, providing detailed regulatory guidance, and addressing re-identification incentives. Recommendations are provided for advancing Uzbekistan's data protection laws and practices based on international experiences, such as enabling public oversight, conducting localized impact assessments, and promoting privacy-enhancing technologies. The study concludes that to anonymize data in a way that enables research while also protecting people's rights, we need a comprehensive approach that includes laws, organizational rules, technical safeguards, ethical decision-making, and public input. All of these parts working together is important for successful data anonymization.

 

Author Biography

Sardor Mamanazarov, Tashkent State University of Law

Head of Human Resources Department

Downloads

Published

2024-04-05

How to Cite

Mamanazarov, S. (2024) “De-identification and anonymization: legal and technical approaches”, TSUL Legal Report International electronic scientific journal, 5(1), pp. 25-37. Available at: https://legalreport.tsul.uz/index.php/journal/article/view/175 (Accessed: 24May2024).

Issue

Section

12.00.03 – Civil law. Business law. Family law. International private law

Most read articles by the same author(s)

Obs.: This plugin requires at least one statistics/report plugin to be enabled. If your statistics plugins provide more than one metric then please also select a main metric on the admin's site settings page and/or on the journal manager's settings pages.