NIST COMMENT LETTER – DEIDENTIFICATION OF PERSONALLY IDENTIFIABLE INFORMATION

8/20/2019 NIST COMMENT LETTER – DE IDENTIFICATION OF PERSONALLY IDENTIFIABLE INFORMATION

http://slidepdf.com/reader/full/nist-comment-letter-deidentification-of-personally-identifiable-information 1/11

"#$#$%&'$()

!"#$%&&'( *%+ ,*'-.%/0& ('1%*'-2 3 '$+%1 &, (-+4&5.%6&%-5('%('.&%427.%6&8/,*

*"+ ),- ./),

0"12$#"3 4#%121516 $7 81"#9":9% "#9 ;6'<#$3$=+ >048;?

@11#A B$(C516: 86'5:21+ D2E2%2$#- 4#7$:("12$# ;6'<#$3$=+ F"G$:"1$:+

)// H5:6"5 D:2E6 >*"23 81$C IJK/?

L"21<6:%G5:=- *D ./IJJMIJK/

"#$ %&'() *+,-+" ./01 %#2+3#4)5(56')574 7( 8#&974'::; +3#4)5(5'<:# +4(7&=')574

N6 "CC:6'2"16 1<6 $CC$:15#21+ 1$ %5G(21 '$((6#1% 1$ 1<6 0"12$#"3 4#%121516 $7 81"#9":9% "#9

;6'<#$3$=+ >048;? 2# 1<6 '$#16O1 $7 1<6 9:"71 C5G32'"12$# 6#121369 9-+4& :;!<;= >?@A 9'5;('.&%4%B+&%,. ,4

C'-6,.+112 ;('.&%4%+#1' ;.4,-$+&%,. >048; D:"71 P6C$:1?&

;<2% 36116: 2% %6C":"169 2#1$ 1<6 7$33$Q2#= 1<:66 %6'12$#%A

4& R:$C$%"3 1$ 4#'3596 D+#"(2' D"1" SG%'5:21+ 2# 048; D:"71 P6C$:1T

44& U2%1$:+ $7 1<6 16:( D+#"(2' D"1" SG%'5:21+T "#9

444& ;<6 @#$#$% V5%1M4#M;2(6M496#121+ >V4;4? @CC:$"'< 1$ D+#"(2' D"1" SG%'5:21+&

+> 8&7?79': )7 +46:@3# %;4'=56 %')' A<96@&5); 54 *+,- %&'() "#?7&)

N6 C:$C$%6 1<"1 1<6 048; D:"71 P6C$:1 2#'3596 D+#"(2' D"1" SG%'5:21+ W 16(C$:"33+ 9+#"(2' 9"1"

$G%'5:2#= 16'<#$3$=+ 1<"1 "'12E63+ 32(21% 1<6 :2%X $7 :6M296#1272'"12$#& @% #$169 2# 1<6 048; D:"71 P6C$:1-

%1"12' 96M296#1272'"12$# 16'<#2Y56% %5776: 7:$( #5(6:$5% %<$:1'$(2#=%T <$Q6E6:- 9+#"(2' $G%'5:2#=

16'<#$3$=+ <63C% ("2#1"2# 9"1" C:2E"'+ "#9 %6'5:21+ Q<236 :695'2#= :2%X% 2#E$3E69 2# '$336'12#=- %1$:2#=-

C:$'6%%2#=- "#9 "#"3+Z2#= 9"1"&

D+#"(2' D"1" SG%'5:21+ 15:#% 9"1" 2#1$ G5%2#6%% 2#16332=6#'6 >H4?) G+ 1:"#%7$:(2#= %1"12' "''6%%

'$#1:$3% 2#1$ 16'<#$3$=2'"33+ 6#7$:'69 9+#"(2' C6:(2%%2$#% "CC3269 C6:M636(6#1 2#%16"9 $7 "':$%%

6#12:6 :6'$:9% $: "CC32'"12$#%& ;<2% ("O2(2Z6% 1<6 512321+ $7 5#96:3+2#= 9"1" G+ "33$Q2#= 2#16332=6#1-"9"C1"G36- "#9 '$(C32"#1 C6:(2%%2$#% Q<236 75#9"(6#1"33+ 6#7$:'2#= '$:6 C:$16'12$#% 7$: C6:%$#"33+

296#1272"G36 "#9 %6#%212E6 2#7$:("12$#&

) H5%2#6%% 2#16332=6#'6 >H4? 2% "# 5(G:633" 16:( 1<"1 2#'3596% 1<6 "CC32'"12$#%- 2#7:"%1:5'15:6 "#9 1$$3%- "#9 G6%1 C:"'12'6%

1<"1 6#"G36 "''6%% 1$ "#9 "#"3+%2% $7 2#7$:("12$# 1$ 2(C:$E6 "#9 $C12(2Z6 96'2%2$#% "#9 C6:7$:("#'6& 866

<11CA[[QQQ&=":1#6:&'$([21M=3$%%":+[G5%2#6%%M2#16332=6#'6MG2



"#$#$%&'$(.

;6'<#$3$=2'"33+ 6#7$:'69 D+#"(2' D"1" SG%'5:21+ :536% '"# "''$5#1 7$: "''6%%- 5%6- 92%C3"+- 12(6- "#9

3$'"12$# :6%1:2'12$#%- "':$%% "#+ 2#95%1:+ $: :6=53"1$:+ %1"#9":9- 1<6:6G+ <63C2#= 1$ $E6:'$(6

%<$:1'$(2#=% $7 %1"12' 96M296#1272'"12$# %5'< "% 1<6 7$33$Q2#=A

"? P6M496#1272'"12$#& N21< %1"12' 96M296#1272'"12$#- "% 3$#= "% "#+ 512321+ :6("2#% 2# 1<6 9"1"- 1<6:6

6O2%1% 1<6 C$%%2G2321+ 1<"1 %$(6 2#7$:("12$# (2=<1 :6%531 2# :6M296#1272'"12$# $7 $:2=2#"3

296#12126%&.

G? F$%1 D"1" \"356& L6#6:"33+- C:2E"'+ C:$16'12$# 2(C:$E6% "% ($:6 "==:6%%2E6 %1"12' 96M

296#1272'"12$# 16'<#2Y56% ":6 6(C3$+69- G51 36%% 512321+ :6("2#% 2# 1<6 :6%5312#= 9"1" %61K 956 1$

1<6 7"'1 1<"1 %1"12' 96M296#1272'"12$# 16'<#2Y56% :6($E6 296#127+2#= 2#7$:("12$# 7:$( 9"1"&]

'? 86'5:21+ H:6"'< ̂ OC$%5:6& ;<6 %'$C6 "#9 7:6Y56#'+ $7 9"1" %6'5:21+ G:6"'<6% <"E6 '<"#=69 1<6

C:2E"'+ C":"92=(& 8$(6 E26Q 1<671 $7 C6:%$#"3 9"1" G+ '+G6:':2(2#"3% "% 1<6 #5(G6: $#6 1<:6"1

1$ C:2E"'+&,

U$Q6E6:- %1"12' 96M296#1272'"12$# 16'<#2Y56% ":6 #$1 96%2=#69 1$ 2(C:$E6 9"1"%6'5:21+&

9? 4#16:#"12$#"3 @''6C1"#'6& B$(C32"#'6 Q21< C:2E"'+ 3"Q% 2# $#6 _5:2%92'12$# G+ :63+2#= $# '32'XM

1<:$5=< 16:(% "#9 '$#9212$#% "#9[$: %1"12' 96M296#1272'"12$# ("+ C:$E296 2#%5772'26#1 =:$5#9%

1$ 36="33+ 5%6 9"1" 2# $1<6: _5:2%92'12$#%& `$: 6O"(C36- L6#6:"3 D"1" R:$16'12$# P6=53"12$#%-

'5::6#13+ 5#96: #6=$12"12$# G61Q66# 1<6 ^5:$C6"# R":32"(6#1 "#9 1<6 B$5#'23 $7 1<6 â- ":6

6OC6'169 1$ "33$Q â '212Z6#% 1$ %66X :69:6%% Q21< 1<62: #"12$#"3 :6=53"1$:% $E6: " '$(C"#+b%

<"#932#= $7 1<62: 9"1"- :"1<6: 1<"# G62#= %5G_6'1 1$ 3"Q% 2# 1<6 '$5#1:+ Q<6:6 1<6 '$(C"#+ <"%

21% <6"9Y5":16:%&c

Ô2%12#= 16'<#$3$=+ 9$6% #$1 6776'12E63+ "99:6%% %<$:1'$(2#=% $7 %1"12' 96M296#1272'"12$# #$: 9$6% 21"96Y5"163+ :6'$#'236 '$#732'1% G61Q66# C:$16'12#= C6:%$#"3 9"1" "#9 6#"G32#= '$((6:'6& H6'"5%6 $7

1<2%- '$(C"#26% '"# G6 C3"'69 2# 1<6 5#'$(7$:1"G36 C$%212$# $7 '<$$%2#= G61Q66# 9632E6:2#= C:$95'1%

"#9 %6:E2'6% 1$ '$#%5(6:% $: '$(C3+2#= Q21< 9"1" C:2E"'+ 3"Q% 2#A

"? V5:2%92'12$#% 1<"1 :6Y52:6 5#"(G2=5$5% '$#%6#1 1$ 5%6 C6:%$#"3 9"1" 32X6 2# 1<6 âT

G? 4#95%1:26% %5G_6'1 1$ %C6'272' :6=53"1$:+ :6%1:2'12$#% $# 9"1" 5%6 32X6 <6"31<'":6- 695'"12$# "#9

72#"#'6 2# 1<6 a#2169 81"16%T "#9

'? S1<6: 9"1" 5%6 %'6#":2$% %5G_6'1 1$ 5#'6:1"2# 7515:6&

. 048; D:"71 P6C$:1 "1 32#6 ),)&

K 048; D:"71 P6C$:1 "1 32#6 ),/&

] 048; D:"71 P6C$:1 "1 32#6 dc&

, P$G2#%$#- ;6:2& eR:2E"'+ *"116:%&f !D E+/+F%.'& *"+ )- ./),& <11CA[[QQQ&%'("="Z2#6&'$([C:2E"'+M

("116:%[":12'36[]/J/])[c *6+6:- D"E29& eH63=25( ;":=61% ̀ "'6G$$X ;:"'X2#=&f C,1%&%B,& *"+ ),- ./),& <11CA[[QQQ&C$3212'$&65[":12'36[G63=25(M

1":=61%M7"'6G$$XM1:"'X2#=[



"#$#$%&'$(K

D+#"(2' D"1" SG%'5:21+ 2% " #6Q 16'<#$3$=2'"3 "CC:$"'< 1$ C:$16'12#= C6:%$#"3 9"1"- Q<236 "1 1<6

%"(6 12(6 G:29=2#= 1<6 ="C G61Q66# '$((6:'6 "#9 :6=53"12$#%& 4#%16"9 $7 +61 "#$1<6: "CC32'"12$#

3"+6: $# 1$C $7 36="'+ 9"1" %$5:'6%- D+#"(2' D"1" SG%'5:21+ '"# 32(21 1<6 "G2321+ 1$ 2#76:- %2#=36 $51- $:

32#X 1$ C6:%$#"33+ 296#1272"G36 $: %6#%212E6 2#7$:("12$#&

B5::6#1 "CC:$"'<6% 1$ C:$16'12#= 9"1" ":6 G2#":+ 2# #"15:6 W (+&+ %6 '%&0'- *+1"+#1' ,- G-%*+&' W 7$:

6O"(C36A

• ^#':+C169 9"1" 2% 621<6: C:$16'169 G51 5#5%"G36 $: 5%"G36 G51 5#C:$16'169 Q<6# 96':+C169T

"#9

• N21< 92=21"3 2#7$:("12$#- 9"1" 2% =6#6:"33+ #$1 96M296#127269 G51 "E"23"G36 1$ '5%1$(2Z6 $776:2#=%

7$: 1<6 G6#6721 $7 '$#%5(6:%- $: 2% 96M296#127269 G51 5#"E"23"G36 1$ 7533+ G6#6721 '$#%5(6:%-

'$(C"#26%- "#9 %$'261+ "1 3":=6&

4# " :6C$:1 %5G(21169 1$ R:6%296#1 SG"(" 2# *"+ ./)] 6#121369 H%/ 9+&+ +.( C-%*+B2I J <'B0.,1,/%B+1

C'-6G'B&%*'-d " Q$:X2#= =:$5C $7 1<6 R:6%296#1g% B$5#'23 $7 @9E2%$:% $# 8'26#'6 "#9 ;6'<#$3$=+ >RB@8;?#$169A

<0' #'.'4%B%+1 "6'6 ,4 .'+-5"#%K"%&,"6 (+&+ B,11'B&%,. +-' 1+-/'L +.( &0'2

4"'1 +. %.B-'+6%./12 %$G,-&+.& 6'& ,4 'B,.,$%B +B&%*%&%'68 <+M'. &,/'&0'-L

&0'6' B,.6%('-+&%,.6 6"//'6& &0+& + G,1%B2 4,B"6 ,. 1%$%&%./ (+&+

B,11'B&%,. N%11 .,& #' + #-,+(12 +GG1%B+#1' ,- 6B+1+#1' 6&-+&'/2 O .,- ,.'

1%M'12 &, +B0%'*' &0' -%/0& #+1+.B' #'&N''. #'.'4%B%+1 -'6"1&6 +.(

".%.&'.('( .'/+&%*' B,.6'K"'.B'6 P6"B0 +6 %.0%#%&%./ 'B,.,$%B /-,N&0Q8

E,-' #-,+(12L CDJ!< #'1%'*'6 &0+& %& %6 &0' "6' ,4 (+&+ P%.B1"(%./ #,-.5

(%/%&+1 ,- #,-.5+.+1,/ (+&+ +.( &0' G-,("B&6 ,4 (+&+ 4"6%,. +.( +.+126%6Q&0+& %6 &0' 1,B"6 N0'-' B,.6'K"'.B'6 +-' G-,("B'(8 <0%6 1,B"6 %6 &0'

&'B0.%B+112 $,6& 4'+6%#1' G1+B' &, G-,&'B& G-%*+B28 <'B0.,1,/%'6 +-'

'$'-/%./L #,&0 %. &0' -'6'+-B0 B,$$".%&2 +.( %. &0' B,$$'-B%+1 N,-1(L

d<11C%A[[QQQ&Q<216<$5%6&=$E[%216%[967"531[7236%[(2':$%216%[$%1C[RB@8;[C'"%1hG2=h9"1"h"#9hC:2E"'+hMh("+h./)]&C97



"#$#$%&'$(]

&, ('6B-%#' G-%*+B2 G,1%B%'6L &, -'B,-( &0' ,-%/%.6 PG-,*'.+.B'Q ,4 (+&+L

&0'%- +BB'66L +.( &0'%- 4"-&0'- "6' #2 G-,/-+$6L %.B1"(%./ +.+12&%B6L +.( &,

('&'-$%.' N0'&0'- &0,6' "6'6 B,.4,-$ &, G-%*+B2 G,1%B%'68 !,$'

+GG-,+B0'6 +-' +1-'+(2 %. G-+B&%B+1 "6'8

D+#"(2' D"1" SG%'5:21+ '"# <63C C:$E296 736O2G36 16'<#$3$=+M6#7$:'69 '$#1:$3% #6'6%%":+ 1$ %5CC$:1

6'$#$(2' =:$Q1< :6Y52:2#= %$C<2%12'"169 <"#932#= $7 E":2$5% 9"1" C:2E"'+ :6Y52:6(6#1%& ̀ $: 6O"(C36-

1<6 "G2321+ 1$ 9632E6: $# 1<6 ("#+ C:$(2%6% $7 e<6"31< G2= 9"1"f 2% C:692'"169 $# 1<6 "G2321+ 1$ %5CC$:1

92776:2#= C:2E"'+ :6Y52:6(6#1% 96C6#92#= $# 1<6 %$5:'6 $7 <6"31<M:63"169 9"1"A

• B$#%5(6: <6"31< 9"1" '$336'169 5%2#= C6:%$#"3 <6"31< :6'$:9 1$$3%- ($G236 <6"31< "CC32'"12$#%-

"#9 %$'2"3 #61Q$:X2#= %216% ":6 %5G_6'1 1$ C:2E"'+ C$32'26% [ 16:(% "#9 '$#9212$#% $7 "CC32'"G36

Q6G%216%- 96E2'6% "#9 "CC32'"12$#%T

• R:$16'169 <6"31< 2#7$:("12$# >RU4? 2% %5G_6'1 1$ C:2E"'+ "#9 %6'5:21+ :6Y52:6(6#1% 5#96: 1<6U6"31< 4#%5:"#'6 R$:1"G2321+ "#9 @''$5#1"G2321+ @'1 >U4R@@?T "#9

• U6"31< 9"1" 7:$( 7696:"33+ 75#969 :6%6":'< 2% %5G_6'1 1$ %6C":"16 C:2E"'+ :6Y52:6(6#1% $7 ;<6

`696:"3 R$32'+ 7$: 1<6 R:$16'12$# $7 U5("# 85G_6'1% $: eB$(($# P536&f

^"'< $7 1<6 "G$E6 '"16=$:26% $7 C:2E"'+ "#9 %6'5:21+ :6Y52:6(6#1% '"# G6 %5CC$:169 E2" D+#"(2' D"1"

SG%'5:21+ 96%C216 92776:6#'6% 2# :6Y52:6(6#1% W 1<6:67$:6 $C6#2#= 5C #6Q $CC$:15#2126% 7$: 6'$#$(2'

=:$Q1< "#9 "9E"#'6% 2# :6%6":'< "#9 <6"31<'":6&

D+#"(2' D"1" SG%'5:21+ '$539 6E6# G6 <63C753 2# :6%$3E2#= 1<6 7515:6 $7 ^5:$C6g% 8"76 U":G$:

@=:66(6#1 Q21< 1<6 a&8& "% Q633 "% 9"1" C:$16'12$# C:"'12'6% $7 =3$G"3- 2#16:#61MG"%69 '$(C"#26%$C6:"12#= 2# ^5:$C6 32X6 @CC36- L$$=36- i"<$$- 8X+C6 "#9 *2':$%$71 G+ 7"'2321"12#= %<":2#= $7 C6:%$#"3

9"1" $#3+ 5#96: "51<$:2Z69 '$#9212$#% 2# '$(C32"#'6 Q21< G$1< j36"9j "#9 j'$#'6:#69j D"1"

R:$16'12$# @51<$:2126% 1<6:6G+ "''$(($9"12#= 92776:2#= :6Y52:6(6#1% 2# (5312C36 ^a _5:2%92'12$#%&

++> B59)7&; 7( )C# )#&= %;4'=56 %')' A<96@&5);

S#6 $7 1<6 6":326%1 (6#12$#% $7 1<6 C$Q6: $7 $G%'5:2#= 9"1" Q"% 2# " ./)K B"327$:#2" F"Q P6E26Q

":12'36 6#121369 <0' D+6' 4,- R.1%.' R#6B"-%&2 I G+ N$$9:$Q U":1Z$= "#9 `:696:2' 8151Z("#- 2# Q<2'<

1<6+ %1"169A

R. &0' ;.&'-.'&L ,#6B"-' %.4,-$+&%,. 0+6 + $%.%$+1 -%6M ,4 #'%./

(%6B,*'-'( ,- ".('-6&,,( #2 ".%.&'.('( -'B%G%'.&68 S$G%-%B+1 -'6'+-B0

('$,.6&-+&'6 &0+& ;.&'-.'& "6'-6 -'12 ,. ,#6B"-%&2 G'-0+G6 $,-' &0+.

+.2&0%./ '16' &, G-,&'B& &0'%- G-%*+B28 T'&L ,.1%.' ,#6B"-%&2 0+6 #''.

I<11CA[[QQQ&'"327$:#2"3"Q:6E26Q&$:=[QCM'$#16#1[5C3$"9%[./)][)/[/)MU":1Z$=8151Z("#&C97



"#$#$%&'$(,

1+-/'12 %/.,-'( #2 B,"-&6 +.( 1+N$+M'-68 ;. &0%6 J-&%B1'L N' +-/"' &0+&

,#6B"-%&2 %6 + B-%&%B+1 B,$G,.'.& ,4 ,.1%.' G-%*+B2L #"& %& 0+6 .,& #''.

'$#-+B'( #2 B,"-&6 +.( 1+N$+M'-6 #'B+"6' %& 0+6 .'*'- #''. +('K"+&'12

('4%.'( ,- B,.B'G&"+1%F'(8

;<6 16:( D+#"(2' D"1" SG%'5:21+ Q"% '$2#69 2# "# S'1$G6: ),- ./)] G3$= G+ *":12# @G:"(%- 1<6

^O6'512E6 D2:6'1$: $7 1<6 4#7$:("12$# @''$5#1"G2321+ ̀ $5#9"12$#- Q<2'< %1"169A

<0' 4+B& %6 &0+& N' (+&+ G-,&'B&%,. G-,4'66%,.+16 B+..,& +BB'G& &0' 6&+&"6

K",8 U' .''( &, #' +#1' &, ('$,.6&-+&' ,"- &-"6&N,-&0%.'66L +.(

'44'B&%*' &,,16 +-' G+-& ,4 &0+&8

<0' ;.4,-$+&%,. JBB,".&+#%1%&2 V,".(+&%,.W6 $%66%,. %6 -'6'+-B0 +.(

'("B+&%,. ,. G,1%B2 6,1"&%,.6 &0+& 4+B%1%&+&' %..,*+&%,. N0%1' G-,&'B&%./

%.(%*%("+16 4-,$ %.+GG-,G-%+&' G-,B'66%./8 J6 N' 0+*' N,-M'( &0-,"/0#%/ (+&+ '&0%B6L %& 0+6 -'%.4,-B'( ,"- *%'N &0+& ,"&6%(' ,4 &0' #,X

&'B0.,1,/2 6,1"&%,.6 $"6& #' +*+%1+#1'8 9+&+ .''(6 &, #' *%6%#1' N0'. %& %6

#'%./ "6'( N%&0%. #,".(6L +.( ,#6B"-'( N0'. %& %6 .,&8 <'B0.,1,/2 (,'6

.,& -'G1+B' G,1%B2 '.4,-B'$'.&Y %& $+M'6 &0' '.4,-B'$'.& G,66%#1' +.(

+B&%,.+#1'8

J ."$#'- ,4 "6 0+*' #''. &0%.M%./ +#,"& &0' (%1'$$+ 4,- &0' G+6& 6%X

$,.&06 +.( 1,,M%./ 4,- 6,1"&%,.68 U' #'1%'*' &0' 6,1"&%,.6 +-' G+-& ,4 +

4%'1( N' 0+*' #'/". &, B+11 Z92.+$%B 9+&+ R#6B"-%&28[ 92.+$%B (+&+

,#6B"-%&2 %.*,1*'6 ,#6B"-%./ (+&+ (,N. &, &0' '1'$'.& 1'*'1 N0'. &0+&

1'*'1 ,4 6'B"-%&2 %6 .'B'66+-2 +.( $+M%./ 6"-' &0+& -"1'6 N0%B0 B,.&-,1N0'. '1'$'.&6 B+. #' 6''. +-' -'+1 +.( '.4,-B'(8 92.+$%B (+&+

,#6B"-%&2 %6 +16, +#,"& $+M%./ &0' &'B0.,1,/2 B,.&-,16 0+-('- &, #-'+M

#"& 6&%11 +11,N%./ 4,- +GG-,G-%+&' "6'68 ;& -'K"%-'6 #,&0 .'N &'B0.,1,/%'6

B,$#%.'( N%&0 '44'B&%*' %.&'-.+1 $,.%&,-%./ +.( '.4,-B'$'.&8J

;<6 #6O1 C5G32' 5%6 $7 1<6 16:( D+#"(2' D"1" SG%'5:21+ 1$$X C3"'6 2# "# S'1$G6: ./- ./)]

4#16:#"12$#"3 @%%$'2"12$# $7 R:2E"'+ R:$76%%2$#"3% >4@RR? R:2E"'+ R6:%C6'12E6% ":12'36)/

Q:2116# G+ L":+

F"`6E6:- B$M`$5#96: "#9 B<267 ^O6'512E6 S772'6: $7 @#$#$% M " C2$#66: 2# 96E63$C2#= C:"'12'"3

"CC32'"12$#% $7 D+#"(2' D"1" SG%'5:21+ 16'<#$3$=+- 2# Q<2'< <6 %1"169A

U'W-' .,& (%6B,".&%./ &0' *+1"' ,4 +.,.2$%F+&%,.Y %& G,N'-'( &0' /-,N&0

,4 &0' ;.&'-.'&8 H"& &,(+2L &'B0.,1,/2L $+-M'&6L +GG1%B+&%,.6 +.( &0-'+&6

0+*' '*,1*'( N0%1' &0' G-,&,B,16 &, M''G G'-6,.+112 %('.&%4%+#1' (+&+

J<11CA[[2#7$:("12$#"''$5#1"G2321+&$:=[1"X2#=M"''$5#1"G2321+M'$#1:$3%M1$M1<6M#6O1M36E63M9+#"(2'M9"1"M$G%'5:21+[

)/<11C%A[[C:2E"'+"%%$'2"12$#&$:=[#6Q%["[Q<"1M"#$#+(2Z"12$#M"#9M1<6M1%"M<"E6M2#M'$(($#[



"#$#$%&'$(c

+.,.2$,"6 0+*' .,&8 ;4 N' +-' &, $%.' &0' *+6& G,&'.&%+1 ,4 (+&+

+.+12&%B6 &, B-'+&' 0%/05*+1"' G-,("B&6 +.( 6'-*%B'6 &0+& %$G-,*' +.(

'*'. 6+*' 1%*'6 N0%1' $''&%./ &0' G-%*+B2 'XG'B&+&%,.6 ,4 &0' G"#1%B +.(

-'/"1+&,-6L N' .''( .'N &,,16 +.( &0%.M%./8

92.+$%B (+&+ ,#6B"-%&2 %$G-,*'6 "G,. 6&+&%B +.,.2$%&2 #2 $,*%./

#'2,.( G-,&'B&%./ (+&+ +& &0' (+&+ -'B,-( 1'*'1 &, '.+#1' (+&+ G-,&'B&%,.

+& &0' (+&+ '1'$'.& 1'*'18 92.+$%B (+&+ ,#6B"-%&2 '$G,N'-6 G-%*+B2

,44%B'-6 &, %$G-,*' &0' Z,G&%B6[ ,4 (+&+ G-,&'B&%,. 4,- (+&+ 6"#\'B&6L

-'/"1+&,-6 +.( &0' .'N6 $'(%+ N0%1' ('G1,2%./ .'X&5/'.'-+&%,.

&'B0.,1,/2 6,1"&%,.6 &0+& ('1%*'- $,-' '44'B&%*' (+&+ G-%*+B2 B,.&-,16

N0%1' $+X%$%F%./ (+&+ *+1"'8

]%#-+.& +.( /-,N%./ +-'+6 ,4 'B,.,$%B +B&%*%&2^&0' Z&-"6& 'B,.,$2L[ 1%4'6B%'.B'6 -'6'+-B0L G'-6,.+1%F'( $'(%B%.'3'("B+&%,.L &0' ;.&'-.'& ,4

<0%./6L G'-6,.+1%F+&%,. ,4 /,,(6 +.( 6'-*%B'6^+-' #+6'( ,. %.(%*%("+16

&-"6&%./ &0+& &0'%- (+&+ %6 G-%*+&'L G-,&'B&'( +.( "6'( ,.12 4,- +"&0,-%F'(

G"-G,6'6 &0+& #-%./ &0'$ $+X%$"$ *+1"'8 <0%6 &-"6& B+..,& #'

$+%.&+%.'( "6%./ 6&+&%B +.,.2$%&28 U' $"6& '$#-+B' .'N +GG-,+B0'6

1%M' (2.+$%B (+&+ ,#6B"-%&2 &, #,&0 $+%.&+%. +.( '+-. &-"6& +.( $,-'

'44'B&%*'12 6'-*' #"6%.'66'6L -'6'+-B0'-6L 0'+1&0B+-' G-,*%('-6 +.( +.2,.'

N0, -'1%'6 ,. &0' %.&'/-%&2 ,4 (+&+8

;<6 4#7$:("12$# @''$5#1"G2321+ ̀ $5#9"12$# <639 " 7:"(2#= 92%'5%%2$# 2# V"#5":+ ./), 2# N"%<2#=1$#

DB "1 Q<2'< 2#E2169 =$E6:#(6#1- 695'"12$# "#9 G5%2#6%% 36"96:% 92%'5%%69 1<"1A

S+-12 +.+12&%B6L (+&%./ 4-,$ &0' _`>?6L N'-' ('G'.('.& ,. +.,.2$%F+&%,.

+.( ('5%('.&%4%B+&%,. &, '.6"-' B,$G1%+.B' +.( %.(%*%("+1 G-,&'B&%,.8 V,-

'X+$G1'L %.4,-$+&%,. "6'( 4,- B-'(%& $+-M'&%./ .''('( &, #' ('5

%('.&%4%'( &, B,$G12 N%&0 &0' V'('-+1 V+%- D-'(%& ='G,-&%./ JB&8

<'B0.,1,/2 G-,*%('( &0' &,,16 &, ('5%('.&%42L +.( &0' +66"-+.B' B+$'

4-,$ &0' -'K"%-'$'.&6 ,4 &0' VD=J8 S44'B&%*' ('5%('.&%4%B+&%,. +.(

+.,.2$%F+&%,. &,,16 0+*' +1N+26 -'6&'( ,. &0%6 $+--%+/' ,4 G,1%B2 +.(

&'B0.,1,/28

<,(+2W6 +.+12&%B6L (-%*'. #2 ,#6'-*+&%,.L $+M'6 &0' $+.(+&' 4,- &0' Z#'1&

+.( 6"6G'.('-6[ ,4 G,1%B2 +.( &'B0.,1,/2 '*'. $,-' B,$G'11%./8 <0'

&'B0.,1,/%'6 +-' B0+11'./'( %.&'-.+112 #2 ,-/+.%F+&%,.6W .''( 4,-

M.,N1'(/' +.( 'X&'-.+112 #2 *'-2 6$+-& B2#'- B-%$%.+168 S*'. N%&0 &0'

#'1& ,4 G,1%B2L &0' 6"6G'.('-6 ,4 &'B0.,1,/2 .''( "G/-+(%./ &, $+&B0

&,(+2W6 B0+11'./'68 ;4 N' (, .,& $''& &0+& B0+11'./'L N' B,"1( 6'' -'+1



"#$#$%&'$(d

-'6%6&+.B' &, &0' %.4,-$+&%,. +/'W6 ("+1 $+.(+&'6 4,- %..,*+&%,. +.(

4+%-.'668 <0' G,1%B2 B,$$".%&2 .''(6 &, 'XG1,-' 92.+$%B 9+&+ R#6B"-%&2

P99RQ &, 6'' %4 %& N%11 '.0+.B' (+&+ 6'B"-%&2 +.( G-%*+B2 &, 4+B%1%&+&'

%.B-'+6'( (+&+ *+1"' +.( G-,&'B&%,. B,$G+-'( &, 1'/+B2 +GG-,+B0'68))

;<6 16:( D+#"(2' D"1" SG%'5:21+ <"% %2#'6 G66# 5%69 "1 2#16:#"12$#"3 '$#76:6#'6%-).

2# '$((6#1

36116:% %5G(21169 1$ 2#16:#"12$#"3 9"1" C:2E"'+ :6=53"1$:%-)K

"#9 2# N<216 R"C6:%)]

$# 1<6 %5G_6'1 $7

D+#"(2' D"1" SG%'5:21+&

+++> -C# D47479E0

F@9)2+42-5=#2+3#4)5); GF+-+H D??&7'6C )7 %;4'=56 %')' A<96@&5);

Anonos has been working on V5%1M4#M;2(6M496#121+ >V4;4? 16'<#$3$=+ W 1<6 @#$#$% "CC:$"'< 1$

2(C36(6#12#= Dynamic Data Obscurity W %2#'6 ./).& @#$#$% 2% '5::6#13+ 6#="=69 2# " R:$$7 $7 B$#'6C1

Q21< "# 2#16:#"12$#"3 D"1" R:$16'12$# @51<$:21+ 1$=61<6: Q21< (5312#"12$#"3 '$(C"#26% 1$ %<$Q 1<"1

@#$#$% V5%1M4#M;2(6M496#121+ >V4;4? 16'<#$3$=26%- 3"+6:69 $# 1$C $7 "# 5#96:3+2#= 2#7$:("12$# C3"17$:(-

'"# 9632E6: 1<:66 2#16:32#X69 G6#6721%A

"? P$36MG"%69 16'<#2'"3 "#9 $:="#2Z"12$#"3 (6"%5:6% 1$ 6#7$:'6 C$32'26% 7$: 5%6 $7 C6:%$#"3 9"1"T

G? `5#'12$#"3 %6C":"12$# G61Q66# 3$QM "#9 <2=<M:2%X 9"1" 5%6% 7$: :6M296#1272'"12$#T "#9

'? 86'5:6 %1$:"=6 $7 5#96:3+2#= 9"1"&

@33 1<:66 G6#6721% 2#':6"%6 1<6 512321+ $7 1<6 2#7$:("12$# C3"17$:( Q<236 "1 1<6 %"(6 12(6 2#':6"%2#= 1<6

C:2E"'+ "#9 %6'5:21+ '$#1:$3% "E"23"G36 1$ C:$16'1 C6:%$#"3 9"1"&

@#$#$% V5%1M4#M;2(6M496#121+ >V4;4? 2% "# ":'<216'15:"33+ 6#7$:'69 C:2E"16MG+M967"531 16'<#$3$=+ 1<"1

:61"2#% 512321+ 5#96: "51<$:2Z69 '$#9212$#%- "#9 %5CC$:1% "33 Y56:26% "#9 "'12$#% Q21< '6#1:"32Z69 "5921

3$==2#=& R$32'26% "#9 :536% '"# G6 '5%1$(2Z69 1$ 32(21 $: 632(2#"16 :6M296#1272'"12$# E2" 2#76:6#'6-

%2#=32#= $51- $: 32#X2#= $7 C6:%$#"3 9"1"&

)) <11CA[[2#7$:("12$#"''$5#1"G2321+&$:=[2"7MQ233M'$#E6#6M99$M92%'5%%2$#M2#M./),[

).<11CA[[2#7$:("12$#"''$5#1"G2321+&$:=[E296$M$7MC"#63M$#M9+#"(2'M9"1"M$G%'5:21+[

)K

<11CA[[QQQ&"#$#$%&'$(["#$#$%M6#"G32#=MG2=9"1"[)]

<11CA[[QQQ&"#$#$%&'$(["#$#$%M9+#"(2'M9"1"M$G%'5:21+[),

@#$#$%- V5%1M4#M;2(6M496#121+- V4;4- D+#"(2' D6M496#12726:- DD4D- "#9 $1<6: (":X% ":6 1:"96(":X% $7 @#$#$% 4#'&

C:$16'169 5#96: a&8& "#9 2#16:#"12$#"3 1:"96(":X 3"Q% "#9 1:6"126%& @#$#$% V5%1M4#M;2(6M496#121+ 16'<#$3$=+ 2%

C:$16'169 5#96: a&8& "#9 2#16:#"12$#"3 '$C+:2=<1 "#9 C"16#1 3"Q% "#9 1:6"126%& S1<6: (":X% 1<"1 "CC6": 2# 1<2% 36116:

"#9 #$1 $Q#69 G+ @#$#$% ":6 1<6 C:$C6:1+ $7 1<62: :6%C6'12E6 $Q#6:%& @#$#$% ("X6% #$ '3"2( $7 :63"12$#%<2C 1$- $:

"77232"12$# Q21<- $Q#6:% $7 (":X% #$1 $Q#69 G+ 5% @#$#$%&



"#$#$%&'$(I

• @#$#$% 9"1" %1$:6% ":6 $G%'5:69 G+ 967"531- "#9 :6E6"3 $:2=2#"3 $: C6:15:G69 9"1" E"356% $#3+ 2#

"''$:9"#'6 Q21< 16'<#2'"33+ 6#7$:'69 :536% 2# :6%C$#%6 1$ "51<$:2Z69 Y56:26%& 4(C:$C6: 5%6 $7 9"1"

2% ":'<216'15:"33+ C:6E6#169&

• ;<6:6 2% 321136 2#'6#12E6 1$ %16"3 @#$#$%M6#"G369 9"1" %1$:6% %2#'6 9"1" 2% $G%'5:69 "1 "33 12(6%&

N21<$51 "''6%% 1$ V5%1M4#M;2(6M496#127+ >V4;4? 9+#"(2' 96M296#1272'"12$# >DD4D? X6+% 1<6 9"1" 2%(2#2("33+ E"35"G36&

• 4# 1<6 6E6#1 $7 "# @#$#$%M6#"G369 9"1" %1$:6 G:6"'<- 9"1" 2% 5#:6"9"G36 "#9 5#5%"G36 1$

5#"51<$:2Z69 C":126%&

• @#$#$% 9"1" %1$:6% '"# G6 ':6"169 7:$( %':"1'< $: 96:2E69 7:$( 6O2%12#= 9"1" %1$:6% $# %1"#9":9

C3"17$:(%&

• @#$#$% 9"1" %1$:6 '$#1:$3% '"# :6736'1 :6=53"1$:+ %1"#9":9% 1<"1 Q233 2#92'"16 1$ '$(C"#26% Q<"1

73$QM1<:$5=< C:$16'12$#% ":6 :6Y52:69 2# $:96: 7$: 1<6( 1$ :6("2# '$(C32"#1 Q<6# ':"712#= 2#16:#"3

:536% "#9 C$32'26%&

B$(C3+2#= Q21< :6=53"12$#% 5%2#= '5::6#1 "CC:$"'<6% 1$ 96M296#1272'"12$#- 9"1" C:2E"'+ "#9 %6'5:21+ '"#

G6 '$(C32'"169 "#9 6OC6#%2E6& @#$#$% "#$#+(2Z2#= '"C"G232126% :61"2# 7533 9"1" E"356 "#9 512321+ Q21<

%5CC$:1 7$: E":2$5% 5%6 '"%6% W "33 Q<236 (2#2(2Z2#= :2%X $7 9"1" (2%5%6- "G5%6 $: '$(C:$(2%6 W @#$#$%

:676:% 1$ 1<2% "% e"#k#$%2Z2#=f 9"1"&

• @#$#$% 9"1" %1$:6 36E63 ":'<216'15:"3 '$#1:$3% 7"'2321"16 G$1< 2#16:#"3 "5921% "#9 6O16:#"3 :6=53"1$:

:6E26Q%&

•

@#$#$% 6#"G36% %<":2#= $7 C$:1"G36 9"1" %1$:6% Q21< (5312C36 C":126% <"E2#= 92776:2#= "51<$:2Z"12$#C:2E236=6% G+ C:$E292#= 5#2Y56 V4;4 DD4D X6+ '$(G2#"12$#% 1$ 6"'< C":1+- "#+ $7 Q<2'< ("+ G6

:6E$X69 ("#5"33+ $: E2" "# "51$("12' 1:2==6: "1 "#+ 12(6&

• @#$#$% 7"'2321"16% '$(C32"#'6 Q21< 9"1" C:2E"'+ 3"Q%- :536% "#9 :6=53"12$#% G+ '$(C"#26% $7 "33

%2Z6% Q21<$51 :6Y52:2#= 1<6( 1$ <"E6 3":=6 2#M<$5%6 9"1" C:2E"'+ [ %6'5:21+ 16"(%&



"#$#$%&'$(J



"#$#$%&'$()/

87)#4)5': D??:56')5749 7( D47479 F@9)2+42-5=#2+3#4)5); GF+-+H %;4'=56 %')' A<96@&5); -#6C47:7I;

JK'=?:# LE$ +4)#&4': %')' M59@9#

N"31 D2%#6+ $776:% E2%21$:% 1$ 21% C":X% e*"=2'H"#9%f

W Q:2%1MQ$:# "51<6#12'"12$# 96E2'6%- C:$E292#= "''6%%

1$ <$163%- :296%- 1:"#%C$:1"12$#- "% Q633 "% "# "G2321+

1$ C"+ 7$: 7$$9- G6E6:"=6%- "#9 %$5E6#2:% E2" " 32#X69

C"+(6#1 '":9& N21<2# " %2#=36 C":X- 1<6:6 (2=<1 G6

<5#9:69% $7 92776:6#1 5%6% 7$: " *"=2'H"#9- 6"'< $7

Q<2'< (2=<1 <"E6 92%12#'1 "''6%% :536%& `$: 6O"(C36-

" :296 (2=<1 #669 1$ X#$Q 1<6 <62=<1 $7 1<6 C"1:$#T "

G": (2=<1 $#3+ "33$Q '<239:6# 2# 95:2#= 35#'<T "#9

C"+(6#1% $7 '6:1"2# 1+C6% (2=<1 :6Y52:6 G$1< 1<6

'<239b% "#9 C":6#1b% *"=2'H"#9& `2#"33+- " 3$%1 '<239

Q21< " *"=2'H"#9 '"# G6 6"%23+ :65#2169 Q21< 1:5%169

7"(23+& ;<6 9"#=6: 2# 1<2% %+%16( '$(6% 7:$( 1:5%169 2#%296:%- G6'"5%6 '5%1$(6:% 96("#9 7533 512321+

Q<236 1<6 C":X <"% " 951+ 1$ ("#"=6 1<6 :2%X $7 6OC$%2#= 1$$ (5'< C6:%$#"3 2#7$:("12$# 1$ 6(C3$+66%&

`:$( " %1"77 ("#"=6(6#1 C6:%C6'12E6- 1<6 2#'6#12E6 2% 1$ <"E6 76Q6: :$36% Q21< =:6"16: "''6%% "#9

"51<$:21+- G51 1<"1 6#"G36% 6(C3$+66% Q21< 1<6 :2=<1 "''6%% 1$ "==:6="16 1<6 :6Y52:69 9"1" 7:$(

92776:6#1 *"=2'H"#9 5%6% "#9 1:"'X 1<6 ($E6(6#1 $7 =56%1%- X#$Q Q<6# 1<6+b:6 #$1 2# 1<62: <$163

:$$(%- $: 6E6# ("#2C53"16 C":"(616:% 1$ ':6"16 9"#=6:$5% "51<$:2Z"12$#% 7$: %("33 '<239:6# 1$ =$ $#

"9531M%2Z69 :296%& @#$#$%M6#"G369 9"1" %1$:6% 7$: 6"'< $7 1<6%6 5%6 '"%6% Q$539 632(2#"16 %5'< :2%X%-

G6'"5%6 6(C3$+66 :$36% Q$539 G6 9672#69 $# " C6:M5%6M'"%6 '$#16O1 G"%2%- "#9 '"%5"3 G:$Q%2#= $7 1<6

Q296: 7"(23+ :6'$:9% Q$539 G6 C:6E6#169&

JK'=?:# LN$ "#253#4)5(56')574

;<6 V"#5":+ ./), 8'26#'6 _$5:#"3 2#'3596% " K ($#1<

%159+ $7 ':6921 '":9 :6'$:9% 7$: )&) (2332$# C6$C36

1<"1 %<$Q% 7$5: %C"12$16(C$:"3 C$2#1% ":6 6#$5=< 1$

5#2Y563+ :6M296#127+ J/l $7 ':6921 '":9 '5%1$(6:%&

@#$#$% 96M296#12726:% >DD4D%? 96M296#127+ ':6921 '":9

'5%1$(6:% 7$: 6"'< 1:"#%"'12$# W C:$E292#= " V5%1M4#M

;2(6M496#121+ >V4;4? 7$: 6"'< 1:"#%"'12$#& @% " :6%531-

'5%1$(6:% '"##$1 G6 :6M296#127269 G+ (6"#% $7

'$::63"12#= %1"12' "#$#+($5% 296#12726:%& ;<6 @#$#$%

"CC:$"'< ("X6% 32(212#= 1<6 "G2321+ 1$ %2#=36 $51- 32#X

$: 2#76: " 9"1" %5G_6'1 " C$32'+ '<$2'6 2#%16"9 $7 "

%1"12%12'"3 :2%X&!'' 0&&GI33NNN8+.,.,68B,$3".%B%&2 4,- %.&'-+B&%*' *'-6%,. ,4 &0%6 'X+$G1'



"#$#$%&'$())

JK'=?:# L1$ %')' O&#'6C

`2:(% 32X6 <6"31< 2#%5:6: @#1<6( %5776: Q<6# 1<62:

7"'232126% ":6 G:6"'<69 >"% 9$ 1<62: (2332$#% $7%5G%':2G6:% [ '5%1$(6:% Q<$%6 296#12126% ":6

e<"'X69f? "#9 9"1" 2% X6C1 2# 5#6#':+C169 7$:( 1$

6#"G36 5%6 $7 1<6 9"1"& @% " :6%531- "11"'X6:% '"# ="2#

5#"51<$:2Z69 "''6%% 1$ C6:%$#"3 9"1" 2# e'36":16O1f

7$:( W 2&6&- 5#6#':+C169 2#7$:("12$# 1<"1 2% e2# 1<6

'36":f "#9 5#96:%1"#9"G36& 4# '$#1:"%1 1$ %1"#9":9

6#':+C12$#- Q<2'< 2% =6#6:"33+ 7533+ e$#f $: j$77-j $:

1:"9212$#"3 9"1" ("%X2#= 16'<#2Y56% Q<2'< 9$ #$1

C:$16'1 9"1" "1 1<6 9"1" %1$:6 36E63- @#$#$% V5%1M4#M;2(6M496#121+ >V4;4? '"# C:$16'1 "="2#%1 9"1" 3$%%

7:$( 6O16:#"3 G:6"'<6% Q21<$51 3$%2#= 5%6 $7 9"1" 7$: "51<$:2Z69 C5:C$%6% Q21<2# 1<6 '$(C"#+& N21<

V4;4- "# "11"'X6: ("+ ="2# "''6%% 1$ 9"1" G51 Q$539 #$1 ="2# "''6%% 1$ V4;4 X6+% >X6C1 %6'5:63+ 2#

%6C":"16 E2:15"3 $: C<+%2'"3 3$'"12$#%? #6'6%%":+ 1$ :6E6"3 C6:%$#"3 2#7$:("12$#&

hhhhhhhhhhhhhhh

@#$#$% "CC:6'2"16% 1<6 $CC$:15#21+ 1$ %5G(21 1<2% 36116: 1$ 1<6 0"12$#"3 4#%121516 $7 81"#9":9% "#9

;6'<#$3$=+&

P6%C6'17533+ 85G(21169-

*& L":+ F"`6E6: ;69 *+6:%$#B$M`$5#96: B$M`$5#96:

NIST COMMENT LETTER – DEIDENTIFICATION OF PERSONALLY IDENTIFIABLE INFORMATION

Documents

Transcript of NIST COMMENT LETTER – DEIDENTIFICATION OF PERSONALLY IDENTIFIABLE INFORMATION