Privacy protection and aggregate health data: a review of tabular cell suppression methods (not) employed in public health data systems
There is an ever increasing demand from researchers for access to useful microdata files. However, there are also growing concerns regarding the privacy of the individuals contained in the microdata. Ideally, microdata could be released in such a way that a balance between usefulness of the data and privacy is struck. This paper presents a review of proposed methods of statistical disclosure control and techniques for assessing the privacy of such methods under different definitions of disclosure. AMS 2000 subject classifications: Primary 62A01.