{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,7]],"date-time":"2025-11-07T09:49:38Z","timestamp":1762508978098,"version":"3.41.0"},"reference-count":28,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2023,7,31]],"date-time":"2023-07-31T00:00:00Z","timestamp":1690761600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Federal Ministry for Digital and Transport of Germany"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Digit. Gov.: Res. Pract."],"published-print":{"date-parts":[[2023,7,31]]},"abstract":"<jats:p>Organizations that manage Personally Identifiable Information cannot share this information directly due to legal restrictions. Meanwhile, there are several solutions that support the anonymization of these types of data to make these available to a wider audience. For these solutions, it is important that the corresponding anonymization modules guarantee legal properties. In general, due to the scale and complexity of the software, it is difficult to prove that it does not violate these properties in some cases. This article proposes a new approach that addresses this challenge. The approach provides a software component that checks the output of an anonymization module against editable legal constraints\u2014the Privacy-Enhancing Verification Component (PE-VC). An organization can formulate these constraints separately from the software using the new Compliance Assertion Language. Because the PE-VC is a carefully developed and verified module that can be used without modification for different anonymization modules, an auditor only needs to check the specified assertions and not the software itself. This approach ensures a much higher level of confidence in the correctness of the output of an anonymization software.<\/jats:p>","DOI":"10.1145\/3603255","type":"journal-article","created":{"date-parts":[[2023,6,7]],"date-time":"2023-06-07T11:12:59Z","timestamp":1686136379000},"page":"1-15","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Defining Anonymity Properties of Datasets with the Compliance Assertion Language (COMPASS)"],"prefix":"10.1145","volume":"4","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7306-9453","authenticated-orcid":false,"given":"Richard","family":"G\u00f6bel","sequence":"first","affiliation":[{"name":"Institute for Information Systems at Hof University, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0327-6929","authenticated-orcid":false,"given":"Stephanie","family":"Kitzing","sequence":"additional","affiliation":[{"name":"Institute for Information Systems at Hof University, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,9,19]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1007\/s12394-010-0062-y"},{"key":"e_1_3_1_3_2","unstructured":"Centre for Data Ethics and Innovation. 2021. Privacy Enhancing Technologies Adoption Guide\u2014What Are PETs? Retrieved July 22 2022 from https:\/\/cdeiuk.github.io\/pets-adoption-guide\/what-are-pets."},{"key":"e_1_3_1_4_2","unstructured":"Coordination Office for IT Standards (KoSIT) Bremen Germany. 2020. DSMeld. Retrieved August 25 2020 from https:\/\/www1.osci.de\/meldewesen\/dsmeld\/dsmeld-9-aenderung-22310."},{"issue":"3","key":"e_1_3_1_5_2","first-page":"329","article-title":"Finding a needle in a haystack or identifying anonymous census records","volume":"2","author":"Dalenius Tore","year":"1986","unstructured":"Tore Dalenius. 1986. Finding a needle in a haystack or identifying anonymous census records. J. Offic. Stat. 2, 3 (9 1986), 329\u2013336.","journal-title":"J. Offic. Stat."},{"key":"#cr-split#-e_1_3_1_6_2.1","unstructured":"European Parliament Council of the European Union. 2016. Article 25 of the Regulation"},{"key":"#cr-split#-e_1_3_1_6_2.2","unstructured":"(EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). Article 25 (27 April 2016). Retrieved July 11 2022 from https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj#d1e3063-1-1. 25"},{"key":"#cr-split#-e_1_3_1_7_2.1","unstructured":"European Parliament Council of the European Union. 2016. Article 4 of the Regulation"},{"key":"#cr-split#-e_1_3_1_7_2.2","unstructured":"(EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). Article 4 (27 April 2016). Retrieved August 31 2022 from https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj#d1e1489-1-1. 4"},{"key":"#cr-split#-e_1_3_1_8_2.1","unstructured":"European Parliament Council of the European Union. 2016. Article 5 of the Regulation"},{"key":"#cr-split#-e_1_3_1_8_2.2","unstructured":"(EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). Article 5 (27 April 2016). Retrieved June 3 2022 from https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj#d1e1807-1-1. 5"},{"key":"e_1_3_1_9_2","unstructured":"European Parliament Council of the European Union. 2016. Recital 39\u2014Principles of data processing. Article 39 (27 April 2016). Retrieved July 11 2022 from https:\/\/gdpr.eu\/Recital-39-Principles-of-data-processing. 39"},{"key":"#cr-split#-e_1_3_1_10_2.1","unstructured":"European Parliament Council of the European Union. 2016. Section 4 of the Regulation"},{"key":"#cr-split#-e_1_3_1_10_2.2","unstructured":"(EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). (27 April 2016). Retrieved March 25 2023 from https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32016R0679#d1e3722-1-1."},{"key":"e_1_3_1_11_2","unstructured":"Federal Ministry for Digital and Transport Berlin Germany. 2019. Online-Zugriff auf aktuelle Daten der Einwohnermelde\u00e4mter [Online Access to the Current Data of Residents Registration Offices] \u2013 AktMel. (1 Aug. 2019). Retrieved June 7 2022 from https:\/\/bmdv.bund.de\/SharedDocs\/DE\/Artikel\/DG\/mfund-projekte\/akt-mel.html."},{"key":"e_1_3_1_12_2","article-title":"Synthetic residents\u2019 registration data from the district Wunsiedel im Fichtelgebirge","author":"Bayern Anstalt f\u00fcr Kommunale Datenverarbeitung in","year":"2021","unstructured":"Anstalt f\u00fcr Kommunale Datenverarbeitung in Bayern. 2021. Synthetic residents\u2019 registration data from the district Wunsiedel im Fichtelgebirge. Unpublished raw data.","journal-title":"Unpublished raw data"},{"key":"e_1_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-011-0235-9"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/1217299.1217302"},{"key":"e_1_3_1_15_2","doi-asserted-by":"publisher","DOI":"10.3390\/a12090191"},{"key":"e_1_3_1_16_2","doi-asserted-by":"crossref","unstructured":"Priyanka Nanayakkara Johes Bater Xi He Jessica Hullman and Jennie Rogers. 2022. Visualizing privacy-utility trade-offs in differentially private data releases. arXiv:2201.05964v1. Retrieved from https:\/\/arxiv.org\/abs\/2201.05964v1.","DOI":"10.2478\/popets-2022-0058"},{"key":"e_1_3_1_17_2","unstructured":"OpenStreetMap contributors. 2022. License: Open Data Commons Open Database License (ODbL). Retrieved from https:\/\/www.openstreetmap.org\/copyright\/."},{"key":"e_1_3_1_18_2","unstructured":"Fabian Prasser and Florian Kohlmayer. ARX\u2014Data Anonymization Tool. Retrieved March 23 2023 from https:\/\/arx.deidentifier.org\/anonymization-tool\/."},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23633-9_6"},{"key":"e_1_3_1_20_2","first-page":"1581","volume-title":"Proceedings of the IEEE International Conference on Parallel & Distributed Processing with Applications, Big Data & Cloud Computing, Sustainable Computing & Communications, Social Computing & Networking (ISPA\/BDCloud\/SocialCom\/SustainCom\u201921)","author":"Rawat Anshika","year":"2021","unstructured":"Anshika Rawat, Marijn Janssen, Mortaza S. Bargh, and Sunil Choenni. 2021. Designing a user interface for improving the usability of a statistical disclosure control tool (Abstract). In Proceedings of the IEEE International Conference on Parallel & Distributed Processing with Applications, Big Data & Cloud Computing, Sustainable Computing & Communications, Social Computing & Networking (ISPA\/BDCloud\/SocialCom\/SustainCom\u201921). 1581\u20131591."},{"key":"e_1_3_1_21_2","volume-title":"Protecting Privacy when Disclosing Information: k-Anonymity and Its Enforcement through Generalization and Suppression","author":"Samarati Pierangela","year":"1998","unstructured":"Pierangela Samarati and Latanya Sweeney. 1998. Protecting Privacy when Disclosing Information: k-Anonymity and Its Enforcement through Generalization and Suppression. Technical Report."},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1142\/s0218488502001648"},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.18637\/jss.v067.i04"},{"key":"e_1_3_1_24_2","volume-title":"Introduction to Statistical Disclosure Control (SDC)","author":"Templ Matthias","year":"2014","unstructured":"Matthias Templ, Bernhard Meindl, Alexander Kowarik, and Shuang Chen. 2014. Introduction to Statistical Disclosure Control (SDC). Technical Report. IHSN Working Paper No 007."},{"key":"e_1_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/69.971193"}],"container-title":["Digital Government: Research and Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3603255","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3603255","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:49:11Z","timestamp":1750286951000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3603255"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,31]]},"references-count":28,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,7,31]]}},"alternative-id":["10.1145\/3603255"],"URL":"https:\/\/doi.org\/10.1145\/3603255","relation":{},"ISSN":["2691-199X","2639-0175"],"issn-type":[{"type":"print","value":"2691-199X"},{"type":"electronic","value":"2639-0175"}],"subject":[],"published":{"date-parts":[[2023,7,31]]},"assertion":[{"value":"2022-12-19","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-05-03","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-09-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}