When Excessive Perturbation Goes Wrong and Why IPUMS-International Relies Instead on Sampling, Suppression, Swapping, and Other Minimally Harmful Methods to Protect Privacy of Census Microdata.
When Excessive Perturbation Goes Wrong and Why IPUMS-International Relies Instead on Sampling, Suppression, Swapping, and Other Minimally Harmful Methods to Protect Privacy of Census Microdata.
复制标题
DOI：
10.1007/978-3-642-33627-0_14
复制
发表时间：
2012-09
期刊：
影响因子：
--
通讯作者：
Sobek M
中科院分区：
文献类型：
--
作者：
Cleveland L;McCaa R;Ruggles S;Sobek M
国际人口普查系统免费传播69个国家的人口普查微观数据。目前，研究人员可以获得一系列212个样本，总计近5亿人的记录。研究人员需要注册才能访问微数据。来自谷歌Analytics的统计数据显示，IPUMS-International冗长的、探查性的注册表格对不合格的申请人是一种有效的威慑。为了保护数据隐私，我们主要依靠采样、抑制地理细节、跨地理边界交换记录以及其他危害最小的方法，如顶部和底部编码。我们不使用过度摄动的方法。最近的一个扰动出错的案例——2000年美国人口普查（PUMS）的家庭样本、2003-2006年美国社区调查和2004-2009年当前人口调查——这是一项关于扰动对英国人口普查微数据可用性影响的实证研究——1991年英国人口普查的个人sar——及时的统计保密实践纲要中的数学演示证实了IPUMS微数据管理协议和统计披露控制的智慧。
IPUMS-International disseminates population census microdata at no cost for 69 countries. Currently, a series of 212 samples totaling almost a half billion person records are available to researchers. Registration is required for researchers to gain access to the microdata. Statistics from Google Analytics show that IPUMS-International’s lengthy, probing registration form is an effective deterrent for unqualified applicants. To protect data privacy, we rely principally on sampling, suppression of geographic detail, swapping of records across geographic boundaries, and other minimally harmful methods such as top and bottom coding. We do not use excessively perturbative methods. A recent case of perturbation gone wrong— the household samples of the 2000 census of the USA (PUMS), the 2003–2006 American Community Survey, and the 2004–2009 Current Population Survey—, an empirical study of the impact of perturbation on the usability of UK census microdata—the Individual SARs of the 1991 census of the UK—, and a mathematical demonstration in a timely compendium of statistical confidentiality practices confirm the wisdom of IPUMS microdata management protocols and statistical disclosure controls.