Tighter restrictions on sharing "anonymized information"

[mattflaschen]

Sharing of Information says, "We may also share aggregated or anonymized information that does not directly identify you."

It may be necessary to share anonymized information occasionally. However, true anonymization is very hard. A great deal of supposedly anonymized data simply isn't, as explained by this article giving notable failures (health records, Netflix, AOL).

Thus, the policy should only allow disclosure of anonymized data in narrow circumstances, if at all.