View article

The analysis and release of statistical data about individuals and groups of individuals carries inherent privacy risks, 1 and these risks have been conceptualized in different ways within the fields of law and computer science. 2 For instance, many information privacy laws adopt notions of privacy risk that are sector-or context-specific, such as in the case of laws that protect from disclosure certain types of information contained within health, educational, or financial records. 3 In addition, many privacy laws refer to specific techniques, such as deidentification, that are designed to address a subset of possible attacks on privacy. 4 In doing so, many legal standards for privacy protection