Statistical disclosure control methods for census frequency tables
Statistical disclosure control methods for census frequency tables
复制标题
DOI：
10.1111/j.1751-5823.2007.00010.x
复制
发表时间：
2007-08-01
影响因子：
2
通讯作者：
Shlomo, Natalie
中科院分区：
文献类型：
--
作者：
Shlomo, Natalie
本文回顾了统计机构为包含人口普查（枚举或基于登记）的全部人口计数的标准表格输出而实施的常见统计披露控制（SDC）方法。这些方法包括在制表之前对微数据进行记录交换，以及在生成表后对表中的条目进行舍入。评估 SDC 方法的方法基于披露风险-数据效用框架，以及在管理披露风险、最大化可向用户发布的信息量和确保高质量输出之间找到平衡的需要。为了进行分析，定义了披露风险和数据效用的定量度量并比较了方法。分析结论表明，记录交换作为唯一的 SDC 方法存在很高的泄露风险概率。有针对性的记录交换降低了披露风险，但分布的扭曲程度更高。小单元格调整（舍入）通过消除小单元格来保护人口普查表，但只能传播一组变量和地理位置，以避免因区分嵌套表而导致披露。完全随机舍入提供了更多保护，防止因差异而披露，但边距通常与内部单元格分开舍入，并且表格不是相加的。与记录交换相比，舍入程序可以防止披露风险，因为表格中没有出现小单元格。将舍入与记录交换相结合提高了保护级别，但增加了普查表格输出的效用损失。对于某些统计分析，记录交换和舍入余额的组合在某种程度上会产生相反的效果，这些方法对表格的效用产生影响。
This paper provides a review of common statistical disclosure control (SDC) methods implemented at statistical agencies for standard tabular outputs containing whole population counts from a census (either enumerated or based on a register). These methods include record swapping on the microdata prior to its tabulation and rounding of entries in the tables after they are produced. The approach for assessing SDC methods is based on a disclosure risk-data utility framework and the need to find a balance between managing disclosure risk while maximizing the amount of information that can be released to users and ensuring high quality outputs. To carry out the analysis, quantitative measures of disclosure risk and data utility are defined and methods compared. Conclusions from the analysis show that record swapping as a sole SDC method leaves high probabilities of disclosure risk. Targeted record swapping lowers the disclosure risk, but there is more distortion of distributions. Small cell adjustments (rounding) give protection to census tables by eliminating small cells but only one set of variables and geographies can be disseminated in order to avoid disclosure by differencing nested tables. Full random rounding offers more protection against disclosure by differencing, but margins are typically rounded separately from the internal cells and tables are not additive. Rounding procedures protect against the perception of disclosure risk compared to record swapping since no small cells appear in the tables. Combining rounding with record swapping raises the level of protection but increases the loss of utility to census tabular outputs. For some statistical analysis, the combination of record swapping and rounding balances to some degree opposing effects that the methods have on the utility of the tables.