09 DH Plausible Adversaries in Re-Identification Risk Assessment Lukasz Kniola Biogen, Maidenhead, UK Disclaimer The scope of this presentation is to present the opinions and suggestions of the author. The interpretations of standards and procedures presented are those of the author and are not necessarily correct. Any views, conclusions and recommendations are those of the author, and they do not represent the positions of their employer. Agenda . Context . Methodology . Survey . Trends and Outlooks Adversaries Possible Plausible Context Of Data Release Internal External Public Secondary Secondary Release Research Research (Data Re-use) Classification (1/2) Family Academic Research Acquaintances Regulatory Bodies Doctors Lawyers Other Sponsors Employers Insurance Companies Hackers Patients (Demostration Journalists Themselves Attacks) Direct Relation No Relation Classification (2/2) Adversary’s Background Knowledge Likely / Unlikely Target of Re-id: Specific / Random Adversary Knows Target is in Data Set? Definitely / Doubtfully Journalist Prosecutor Marketer Prosecutor Prosecutor Matching Person To Record