ITU-T X.1771 PDF

De-identification can serve as a solution for an organization to balance between its desires to protect data and to harness the data for innovative purposes. The de-identification techniques described in [ITU-T X.1148] can be used to produce a de-identified dataset from a dataset having an identifying attribute. In addition, there is a need for combined de-identified datasets from different organizations, which can be used for example for statistical calculation, scientific analysis, and other purposes.

This Recommendation provides security guidelines for securely combining de-identified datasets from different organizations. It describes use cases and two models for combining de-identified datasets, identifies related entities, and specifies procedures to combine de-identified datasets submitted from different organizations acting as data controllers or data processors. In addition, this Recommendation proposes organizational and technical controls for trusted third parties which are responsible for combining de-identified datasets for information and communication technology (ICT) service providers.

This Recommendation does not address issues related to regulation.