Linking IdentityThe AnonymizerName: Rob SmithDOB: 6/7/1972cd5dced41028cb7ea51d52a888089d7300c9782a552a2d09b1b85e0d0db52ef37f2b6e48ea7d042bbe85e46ef2107da4AnonymizerRobSmith6/7/1972Robert7/6/197219720d06b31faa7c44682d770706640465d2B5e341a4b0cdf0e8de7b6f957818d746bd0ec72f2424729efa7baac9a636970aVariantsM. Randal SmithDOB: 06/07/74713 731 5577Mark Randy SmithDOB: 06/07/74123 Main Street713 731 5577LabResultsOutcomesRecord #A-701Record #B-9103ObservationsRe-Constructed IdentitiesFEATURES:Mark Randy Smith, M. Randal Smith123 Main Street713 731 5577DOB 06/07/74SensorsPatient Identifiers Are First AnonymizedLabResultsOutcomesRecord #A-701Record #B-9103Cd5dced41028cb 00c9782a552a2 7f2b6e48ea7d0 0d06b31faa7cB5e341a4b0c00c9782a552Patient Identifiers Are First AnonymizedObservationsRe-Constructed IdentitiesFEATURES:Mark Randy Smith, M. Randal Smith123 Main Street713 731 5577DOB 06/07/74SensorsCd5dced41028cb 00c9782a552a2 7f2b6e48ea7d0 0d06b31faa7cB5e341a4b0c00c9782a552Identity Resolution Occurring Post AnonymizationLabResultsOutcomesRecord #A-701Record #B-9103ObservationsRe-Constructed IdentitiesSensorsFEATURES:Mark Randy Smith, M. Randal Smith123 Main Street713 731 5577DOB 06/07/74FEATURES:Mark Randy Smith, M. Randal Smith123 Main Street713 731 5577DOB 06/07/74Cd5dced41028cb 00c9782a552a2 7f2b6e48ea7d0 0d06b31faa7cB5e341a4b0c00c9782a552Patient Linkage Data is Not Stored in Clear TextLabResultsOutcomesObservationsRe-Constructed IdentitiesSensorsRecord #A-701Record #B-9103FEATURES:Cd5dced41028cb7ea5100c9782a552a2d09b1b7f2b6e48ea7d042bbe8Cd5dced41028cb 00c9782a552a2 7f2b6e48ea7d0 0d06b31faa7cB5e341a4b0c00c9782a552Patient Linkage Data is Stored AnonymizedLabResultsOutcomesObservationsRe-Constructed IdentitiesSensorsRecord #A-701Record #B-9103Record #A-701MatchesRecord #B-9103DiscoveryM. Randal SmithDOB: 06/07/74713 731 5577Mark Randy SmithDOB: 06/07/74123 Main Street713 731 5577LabResultsOutcomesRecord #A-701Record #B-9103ObservationsSensorsPolicy ControlsPolicy ControlsMaximizing Discovery - Minimizing Disclosure!61Benefits of Anonymous ResolutionUnlike other anonymization techniques, identities can be disambiguated after anonymization (versus k-anonymity techniques)Guaranteed source attribution resulting in a fully auditable and reconcilable systemDomain-specific implementations virtually eliminates the opportunities for re-purposing the anonymized databaseWhere there is sharing or there are pressures to share sensitive identity data, presents an important alternative to “wide open” sharingEnhanced protections against unintended information disclosure (e.g., insider threat resistant)