(音声付き) パーソナルデータの利活用と個人情報保護法

Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2014610 BITA

Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. 2

IT IT JIPDEC JIPDEC JIPDEC ISO/IEC JTC1/SC27 WG5 http://yosihiro.com/profile/


Why Know


X Y

Z


How Think


http://www.kantei.go.jp/jp/singi/it2/pd/index.html



4-1



1-1



4-1



2-1


http://bit.Ly/aoitori



2-1


EU29WP29Anonymisation Techniques

AnonymisationPseudonymisation Good anonymisation practices In general: - Do not rely on the release and forget approach. Given the residual risk of identification, data controllers should:

1. Identify new risks and re-evaluate the residual risk(s) regularly,

2. Assess whether the controls for identified risks suffice and adjust accordingly; AND

3. Monitor and control the risks.

- As part of such residual risks, take into account the identification potential of the non-anonymised portion of a dataset (if any), especially when combined with the anonymised portion, plus of possible correlations between attributes (e.g. between geographical location and wealth level data).


ISO/TS 25237 Health information Pseudonymization

5.1.4.3 The concept of pseudonymization

The practice and advancement of medicine require that elements of private medical records be released for teaching, research, quality control and other purposes. For both scientific and privacy reasons these record elements need to be modified to conceal the identities of the subjects.

There is no one single de-identification procedure that will meet the diverse needs of all the medical uses while providing identity concealment. Every record release process shall be subject to risk analysis to evaluate:

a) the purpose for the data release (e.g. analysis); WP292.2.1 b) the minimum information that shall be released to meet that purpose;

c) what the disclosure risks will be (including re-identification);

d) what release strategies are available.



2-1


a

a

b

b


a

a

a a



10 1-2



2-1


WG

WG


WG



2-1


to do What


[email protected] [email protected]


15 16 17 18 19 20 21 22 23 24 25 26 27


=

=


vs

=

=

=



10 5



(1)


http://yosihiro.com/speech/#2014-06-10

http://twitter.com/4416sato

vs

Slide Number 60

Law

(音声付き) パーソナルデータの利活用と個人情報保護法