Deanonymization is a computational procedure that links supposedly anonymous records to identifiable individuals using auxiliary information. Removing names and email addresses may not prevent identification when contextual clues remain. section 8.3.3
Deanonymization commonly relies on:
- Cross-referencing dates, ratings, review text, travel patterns, demographics, or search queries with publicly available information. section 8.3.3
- Combining several non-sensitive attributes until they provide enough clues to narrow or uniquely identify a person. section 8.3.3
Netflix ratings and IMDb
A 2006 Netflix ratings dataset removed names and email addresses, but researchers matched dates, ratings, and review context with IMDb records to identify users and reveal personal information. section 8.3.3
