A General Framework and Metrics for Longitudinal Data Anonymization

  • Nicolas RuizEmail author
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 11126)


The bulk of methods in statistical disclosure control primarily deal with individual data from a cross-sectional perspective, i.e. data where individuals are observed at one single point in time. However, nowadays longitudinal data, i.e. individuals observed over multiple periods, are increasingly collected. Such data enhance undoubtedly the possibility of statistical analysis compared to cross-sectional data, but also come with some additional layers of information that have to remain practically useful in a privacy-preserving way. Building on the recently proposed permutation paradigm as an overarching approach to data anonymization, this paper establishes a general framework for the formulation of longitudinal data anonymization and proposes some universal metrics for the assessment of disclosure risk and information loss. We illustrate the application of these new tools using an empirical example.


Statistical disclosure control Longitudinal data Permutation paradigm 


  1. 1.
    Brand, R., Domingo-Ferrer, J., Mateo-Sanz, J.M.: Reference data sets to test and compare SDC methods for the protection of numerical microdata. Deliverable of the EU IST-2000-25069 “CASC” Project (2003)Google Scholar
  2. 2.
    Domingo-Ferrer, J., Muralidhar, K.: New directions in anonymization: permutation paradigm, verifiability by subjects and intruders, transparency to users. Inf. Sci. 337, 11–24 (2016)CrossRefGoogle Scholar
  3. 3.
    Domingo-Ferrer, J., Sánchez, D., Rufian-Torrell, G.: Anonymization of nominal data based on semantic marginality. Inf. Sci. 242, 35–48 (2013)CrossRefGoogle Scholar
  4. 4.
    Fung, B.C.M., Wang, K., Chen, R., Yu, P.S.: Privacy-preserving data publishing: a survey of recent developments. ACM Comput. Surv. (CSUR) 42, 1–53 (2010)CrossRefGoogle Scholar
  5. 5.
    Hundepool, A., et al.: Statistical Disclosure Control. Wiley, Hoboken (2012)CrossRefGoogle Scholar
  6. 6.
    Muralidhar, K., Sarathy, R., Domingo-Ferrer, J.: Reverse mapping to preserve the marginal distributions of attributes in masked microdata. In: Domingo-Ferrer, J. (ed.) PSD 2014. LNCS, vol. 8744, pp. 105–116. Springer, Cham (2014). Scholar
  7. 7.
    Ruiz, N.: A general cipher for individual data anonymization, under review for Information Sciences. (2018)
  8. 8.
    Sehatkar, M., Matwin, S.: HALT: hybrid anonymization of longitudinal transactions. In: Eleventh Conference on Privacy, Security, Trust (PST), pp. 127–134 (2013)Google Scholar
  9. 9.
    Weiss, R.E.: Modelling Longitudinal Data. Springer, New York (2005). Scholar
  10. 10.
    Wooldridge, J.M.: Econometric Analysis of Cross Section and Panel Data, 2nd edn. The MIT Press, Cambridge (2010)zbMATHGoogle Scholar

Copyright information

© Springer Nature Switzerland AG 2018

Authors and Affiliations

  1. 1.Department of Computer Science and Mathematics, CYBERCAT-Center for Cybersecurity Research of Catalonia UNESCO Chair in Data PrivacyUniversitat Rovira i VirgiliTarragonaSpain

Personalised recommendations