信息安全、网络安全和隐私保护——增强隐私的数据去标识框架

[中文适用范围]： 本文件提供了识别和缓解再识别风险以及与去标识化数据生命周期相关的风险的框架。本文件适用于所有类型和规模的组织，包括公共和私营公司、政府实体和非营利组织，这些组织作为个人身份信息（PII）的控制者或处理器，在控制器的 behalf 上实施用于隐私增强目的的去标识化过程。 [外文原描述]： This document provides a framework for identifying and mitigating re-identification risks and risks associated with the lifecycle of de-identified data. This document is applicable to all types and sizes of organizations, including public and private companies, government entities, and not-for-profit organizations, that are PII controllers or PII processors acting on a controller’s behalf, implementing data de-identification processes for privacy enhancing purposes.