Study. uk . com
  1. Home
  2. All questions
  3. Question 187

CISSP study material · question 187 of 500

A research team removes direct identifiers from a dataset but keeps a sealed key allowing subjects to be re-identified if a safety issue arises. Under NIST SP 800-122, may they call the result anonymised?

  1. No: anonymised means no code or other means of re-identification is retained.
  2. Yes, provided the key is held by a different team.
  3. No: anonymisation requires the data to be aggregated as well.
  4. Yes, provided the key is encrypted with an approved algorithm.
Show the answer

Answer: A. No: anonymised means no code or other means of re-identification is retained.

SP 800-122 defines anonymised information as previously identifiable information that has been de-identified and for which no code or other association allowing re-identification still exists.

Source: NIST SP 800-122 (NIST) — SP 800-122 > 4.2.4 Anonymizing Information

Challenge yourself on this topic → Study as cards