Privacy and Anonymity
Privacy belongs in the architecture, not in the fine print
In the digital economy, data protection is not purely a legal matter; it is a technological challenge. Privacy-Enhancing Technologies (PETs) make it possible to extract insights from data without compromising individual privacy or exposing sensitive information.
We rely on Privacy by Design: building data protection directly into the architecture of an application, rather than trying to enforce it after the fact through organisational rules.
Anti-Patterns: The Privacy Illusion
- Pseudo-anonymisation: Simply removing names is often not enough, as individuals can easily be re-identified through the combination of other attributes (e.g. postcode, date of birth, purchase history).
- Trusting the administrator: Relying on administrators or cloud providers not to look at the data, instead of preventing it technically.
- Data hoarding: Collecting data "just in case", without a defined purpose and without an automated deletion concept.
The Privacy Toolbox
- Differential Privacy: A mathematical technique that deliberately adds "noise" to data. Global trends remain visible, but individual records are protected.
- Zero-Knowledge Proofs (ZKP): A cryptographic method for proving the correctness of a piece of information without revealing the information itself (e.g. "I am over 18", without disclosing the date of birth).
- Homomorphic Encryption: Enables computations on data while it remains encrypted. The server returns the result without ever seeing the plaintext data.
- K-Anonymity and L-Diversity: Statistical techniques that ensure every record is indistinguishable within a group of at least K similar records.
- Synthetic Data: Generation of artificial data that has the same statistical properties as real data and is intended to reduce direct relation to actual individuals; depending on the generation method, a residual risk of leakage or re-identification remains and must be tested for.
The Benefit: Compliance and Trust
Organisations that adopt PETs significantly reduce their liability exposure and earn the trust of customers and partners as privacy leaders.
Protection by Architecture, Not by Trust
The strongest data security comes not from organisational rules but from an architecture in which unauthorised access is technically impossible. Two patterns put this principle to work in multi-tenant systems.
- Tenant Isolation: In multi-tenant platforms, the data of different tenants is kept physically or logically separated. When implemented correctly, access across the tenant boundary is ruled out at the technical layer and does not depend on a correctly configured permission.
- Zero-Knowledge Architecture: Unlike a single Zero-Knowledge Proof, this pattern describes a system design in which the data is encrypted such that neither the platform operator nor the cloud provider can see the plaintext. Key authority stays with the organisation that owns the data. This is precisely what removes the anti-pattern, described above, of having to trust the administrator.
FAQ
Don't these techniques make our analyses less accurate?
There is a trade-off (Privacy-Utility Trade-off). But for most business decisions, the accuracy achieved with PETs is entirely sufficient, while the legal risk is reduced significantly at the same time. The individual techniques (differential privacy, k-anonymity, synthetic data, homomorphic encryption) solve different problems and require parameter and risk assessment; a residual risk remains.
Is anonymisation enough to fall outside the scope of GDPR/nFADP?
Anonymisation removes data from scope only if re-identification is not reasonably likely. This is assessed against objective factors and the technology available (GDPR Recital 26, nFADP analogously). PETs reduce this risk, but they provide neither mathematical proof of absolute irreversibility nor zero legal risk.
References
- ENISA Data Pseudonymisation: Advanced Techniques and Use Cases. Guidelines from the European cybersecurity agency on pseudonymisation and PETs. (2021). enisa.europa.eu
- Microsoft Research Differential Privacy for Everyone. An accessible introduction to differential privacy. microsoft.com
- NIST Privacy Engineering Program. Resources and guidance for developers and architects. nist.gov