CIPP/US Study Guide
Chapter 3: Introduction to Technological Aspects of Privacy

Approaches to Deidentification: Suppression, Generalization, Noise Addition

Three core techniques hide identity: suppression removes values, generalization replaces detail with a broader category, and noise addition substitutes similar-but-different values while preserving statistics.

Deidentification techniques
TechniqueHow it worksExample
SuppressionRemove identifying values from a recordDropping names/phone numbers before statistical analysis
GeneralizationReplace detail with a broader categoryYear of birth (~80 categories) instead of full date (~25,000); municipality instead of GPS
Noise additionReplace values with similar but different ones, preserving statisticsAltering precise salaries so payroll cannot match an individual, while keeping the average

Key terms - quick answers

What is “Suppression”?
Removing identifying values from a record (e.g. dropping customer names for statistical analysis).
What is “Generalization”?
Replacing a detailed data element with a more general one (e.g. year of birth instead of full date, municipality instead of GPS).
What is “Noise addition”?
Replacing actual values with similar but different ones, often preserving statistical properties like the average while disrupting individual identification.