risk
Re-identification and unanticipated revelation from data
Insufficient de-identification/pseudonymization, plus inference or linkage attacks and metadata leakage, re-identify individuals or reveal information they did not intend to disclose — causing embarrassment, harm, and regulatory exposure.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- category
- privacy
- domain
- Data Protection & Privacy
- taxonomy
- nist-privacy-risk
- inherent_rating
- medium
Details
- risk_id
- data-reidentification-inference
- category
- privacy
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- nist-privacy-risk
Source
No record-specific source URL is provided.
Connections
- UC-DATA-13 — Safeguard personal information with reasonable security mitigates Re-identification and unanticipated revelation from data
- strength
- related
- rationale
- UC-DATA-12 — De-identify, mask, or pseudonymize personal data mitigates Re-identification and unanticipated revelation from data
- strength
- primary
- rationale
- Masking/pseudonymization/de-identification plus protecting re-identification keys and prohibiting re-identification directly counters linkage/inference attacks.