Balancing Privacy and Information Disclosure in Interactive Record Linkage with Visual Masking

論文URL:http://dl.acm.org/citation.cfm?doid=3173574.3173900

論文アブストラクト:Effective use of data involving personal or sensitive information often requires different people to have access to personal information, which significantly reduces the personal privacy of those whose data is stored and increases risk of identity theft, data leaks, or social engineering attacks. Our research studies the tradeoffs between privacy and utility of personal information for human decision making. Using a record-linkage scenario, this paper presents a controlled study of how varying degrees of information availability influences the ability to effectively use personal information. We compared the quality of human decision-making using a visual interface that controls the amount of personal information available using visual markup to highlight data discrepancies. With this interface, study participants who viewed only 30% of data content had decision quality similar to those who had full 100% access. The results demonstrate that it is possible to greatly limit the amount of personal information available to human decision makers without negatively affecting utility or human effectiveness. However, the findings also show there is a limit to how much data can be hidden before negatively influencing the quality of judgment in decisions involving person-level data. Despite the reduced accuracy with extreme data hiding, the study demonstrates that with proper interface designs, many correct decisions can be made with even legally de-identified data that is fully masked (74.5% accuracy with fully-masked data compared to 84.1% with full access). Thus, when legal requirements only allow for de-identified data access, use of well-designed interface can significantly improve data utility.

日本語のまとめ:

レコードリンケージにおける個人同定処理の際に,個人情報のプライバシーの保護と正確な判断を両立するため,データ内の一致部分を隠して,補助記号を併記するインタフェースの提案,70%のデータを隠しても正確な判断が可能であった.

(114文字)

発表スライド: