Dashboard Structural Analysis anonymize.solutions SD1 LINKABILITY Case Study
← Previous Next →
anonymize.solutions SD1 LINKABILITY
Case Study 9 of 40

The lawfulness of re-identification under data protection law

Teodora Curelariu, Alexandre Lodie · APF (2024-09-04)

Research Source

The lawfulness of re-identification under data protection law
Teodora Curelariu, Alexandre Lodie · APF · 2024-09-04 · Source: hal

Data re-identification methods are becoming increasingly sophisticated and can lead to disastrous data breaches. Re-identification is a key research topic for computer scientists as it can be used to reveal vulnerabilities of de-identification methods such as anonymisation or pseudonymisation. However, re-identification, even for research purposes, involves processing personal data.

Executive Summary

This research paper examines a critical privacy challenge related to LINKABILITY — the ability to connect two pieces of information to the same person.

anonymize.solutions addresses this through dual-layer detection (210+ regex + 3 NLP engines) identifying 260+ entity types across 48 languages, with 5 anonymization methods that break the linkability chain.

Root Cause: SD1 — LINKABILITY

The ability to connect two pieces of information to the same person. This is the foundational operation that makes PII dangerous. Nearly every pain point is an expression of linkability being created, exploited, or failing to be broken.

Irreducible truth: You cannot have useful data that is completely unlinkable AND completely useful. The very features that make data informative make it linkable. This is not a bug — it is information theory. The information content of a dataset and its linkability are the same property measured differently.

The Solution: How anonymize.solutions Addresses This

Detection Capabilities

anonymize.solutions identifies 260+ entity types including advertising IDs, cookie identifiers, browsing interests, location markers, bid request parameters. The dual-layer (regex + NLP) architecture uses 210+ custom pattern recognizers (246 patterns, 75+ country formats, checksum-validated) for structured identifiers and spaCy (25 languages) + Stanza (7 languages) + XLM-RoBERTa (16 languages) for contextual references.

Anonymization Methods

Redact is recommended for this pain point: removing PII before it enters advertising pipelines prevents the 376-times-daily broadcast of personal information. Replace provides an alternative — substituting identifiers with non-trackable alternatives enables advertising analytics without individual targeting. For scenarios requiring reversibility, Encrypt (AES-256-GCM) enables authorized recovery of original values.

Architecture & Deployment

The REST API integrates into data pipelines (n8n, Make, Zapier) for automated PII anonymization before data reaches downstream systems. Three deployment models — SaaS (token pay-per-use), Managed Private (customer key management), and Self-Managed (Docker, air-gapped) — match any infrastructure requirement.

Compliance Mapping

This pain point intersects with GDPR Article 6 lawful basis, ePrivacy Directive consent for tracking, Article 7 consent conditions.

anonymize.solutions’s GDPR, HIPAA, FERPA, PCI-DSS, ISO 27001 compliance coverage, combined with 100% EU (Hetzner Germany, ISO 27001) hosting, provides documented technical measures organizations can reference in their compliance documentation and regulatory submissions.

Product Specifications

SpecificationValue
Product Versionv1.6.12
Entity Types260+
Detection LayersDual-layer: 210+ regex recognizers + 3 NLP engines
Languages48 (spaCy 25, Stanza 7, XLM-RoBERTa 16)
Anonymization MethodsReplace, Redact, Mask, Hash (SHA-256), Encrypt (AES-256-GCM)
Deployment OptionsSaaS, Managed Private, Self-Managed (Docker/Air-Gapped)
Integration PointsREST API, MCP Server, Office Add-in, Desktop App, Chrome Extension
Hosting100% EU (Hetzner Germany, ISO 27001)
ComplianceGDPR, HIPAA, FERPA, PCI-DSS, ISO 27001
← Previous Next →