Anonymized production data consists of operational records modified so individuals cannot be identified directly or reasonably linked back to those records. It supports analysis while reducing exposure of personal information, but responsible use still depends on applicable data-protection requirements. section 8.2.1
Use anonymized production data alongside disciplined governance:
- Limit collection to a specific purpose and restrict access to the data. section 8.2.1
- Retain records only as long as necessary and account for individual rights concerning collection and use. section 8.2.1
- Coordinate analytics practices with IT, security, and legal teams when organizational responsibilities require it. section 8.2.1
Figure 8.3 Many types of sensitive information are governed by sector-specific laws, both in the US, as in the examples shown here, and around the world.
Use the figure to survey sector-specific laws that may shape how sensitive production data is handled. section 8.2.1
