FI-DPA 11 Datenschutz, DSGVO und Anonymisierung (EN)

FI-DPA 11 Data Protection, GDPR and Anonymization

In this module, you will learn the fundamentals of data protection under GDPR with a focus on anonymization techniques. You will understand the concepts of k-anonymity and differential privacy as well as their practical implementation. Additionally, you will acquire knowledge on processing of data by third parties and the prohibition of profiling to implement data protection-compliant processes in companies.

Concepts and Background

k-Anonymity

A data protection principle where each person in a dataset shares identical attributes with at least k-1 other persons, making it impossible to identify individuals.

Differential Privacy

A mathematical concept that ensures the addition or removal of a single person does not significantly change the output of a data analysis algorithm, thereby preserving privacy.

Processing of data by third parties

The processing of personal data on behalf of the controller by a third party, where the controller enters into a contractual agreement to ensure compliance with data protection regulations.

Prohibition of profiling

The prohibition of automated processing of personal data to evaluate certain personal aspects, especially to make predictions about performance, economic situation, health, or personal preferences.

Architecture Diagram

flowchart TD
    A[Raw data] --> B(Anonymization process)
    B --> C{k-Anonymity}
    B --> D[Differential Privacy]
    C --> E[Anonymized data]
    D --> E
    E --> F[Data analysis]
    F --> G[Results]
    G --> H[Pseudonymization]
    H --> I[Publication]

Practical Steps

1. Create a data catalog: Document all personal data holdings in your company. This is the foundation for any data protection measure.
2. Analyze processing procedures: Identify all processes where personal data is processed, including storage location, duration, and access permissions.
3. Implement k-anonymity: Use tools like ARX Data Anonymization Software to anonymize customer data through generalization and suppression.
4. Apply differential privacy: Implement mechanisms such as the Laplace distribution for statistical queries to ensure differential privacy.
5. Regulate processing of data by third parties contractually: Create a contract according to Art. 28 GDPR with all data processors, specifying processing details and security measures.
6. Implement technical and organizational measures (TOMs): Set up access controls, encryption, and pseudonymization to ensure data protection.
7. Conduct a Data Protection Impact Assessment (DPIA): For high-risk processing, conduct and document a DPIA according to Art. 35 GDPR.
8. Plan regular audits: Conduct semi-annual reviews of data protection measures to ensure compliance.

Common Pitfalls

Further Resources

• Regulation (EU) 2016/679 (GDPR) - EUR-Lex
• Federal Commissioner for Data Protection and Freedom of Information (BfDI)
• Privacy Tools Project - Harvard University
• Anonymization under GDPR - Data Protection Officer Info
• ARX Data Anonymization Software

Knowledge Check

Four questions for self-assessment. Click on each question to see the correct answer and explanation.

What is the main goal of k-anonymity in data anonymization?

• A) Maximizing data precision
• B) Preventing the identification of individuals
• C) Reducing data volume
• D) Accelerating data processing

Correct answer: B. k-anonymity aims to ensure that individuals in a dataset cannot be identified by ensuring each person shares identical attributes with at least k-1 others. The other options do not describe the main goal of k-anonymity.

What is a key characteristic of Differential Privacy?

• A) Complete removal of all personal data
• B) Ensuring that adding or removing a single person does not significantly change analysis results
• C) Reversibility of anonymization upon request
• D) Guaranteeing 100% accuracy of data analysis

Correct answer: B. Differential Privacy is based on the mathematical principle that individual data points do not have a significant impact on the result. The other options do not describe the core concept of Differential Privacy.

What is meant by processing of data by third parties in the context of GDPR?

• A) Processing of data by a controller without external help
• B) Processing of data by a third party on behalf of the controller with a contractual agreement
• C) Automated processing of data without human intervention
• D) Processing of data for advertising purposes without consent

Correct answer: B. Processing of data by third parties means that a data processor processes personal data on behalf of the controller, where a contractual agreement is made to ensure compliance with data protection regulations.