Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-188 (2nd Public Draft)

De-Identifying Government Datasets

Date Published: December 2016
Comments Due: December 31, 2016 (public comment period is CLOSED)
Email Questions to: sp800-188-draft@nist.gov

Author(s)

Simson Garfinkel (NIST)

Announcement

De-identification removes identifying information from a dataset so that the remaining data cannot be linked with specific individuals. Government agencies can use de-identification to reduce the privacy risk associated with collecting, processing, archiving, distributing or publishing government data. Previously NIST published NISTIR 8053, De-Identification of Personal Information, which provided a survey of de-identification and re-identification techniques. This document provides specific guidance to government agencies that wish to use de-identification.

In developing the draft Privacy Risk Management Framework, NIST sought the perspectives and experiences of de-identification  experts both inside and outside the US Government.

Future areas of work will focus on developing metrics and tests for de-identification software, as well as working with industry and academia to make algorithms that incorporate formal privacy guarantees usable for government de-identification activities. Collected input will be used to correct technical errors and expand areas that are unclear.

Abstract

Keywords

de-identification; re-identification; Disclosure Review Board; data life cycle; the five safes; k-anonymity; differential privacy; pseudonymization; direct identifiers; quasi-identifiers; privacy; synthetic data
Control Families

Program Management; Risk Assessment; System and Communications Protection

Documentation

Publication:
Second Draft SP 800-188 (pdf)

Supplemental Material:
Comment Template (docx)

Related NIST Publications:
IR 8053

Document History:
08/25/16: SP 800-188 (Draft)
12/15/16: SP 800-188 (Draft)
11/15/22: SP 800-188 (Draft)
09/14/23: SP 800-188 (Final)

Topics

Security and Privacy

privacy

Laws and Regulations

E-Government Act