The Office of the Australian Information Commissioner and CSIRO's Data61 have published the "De-Identification Decision-Making Framework" to assist organizations in appropriately de-identifying data and put strategies in place to recover the information should a data breach occur, ZDNet reports. The framework is structured into three sub-headings, with the first requiring an organization to assess its data situation and conduct an audit, followed by conducting a risk and control analysis, and ending with asking the organization to determine how it would effectively manage the sharing of data. Australian Information and Privacy Commissioner Timothy Pilgrim wrote that the purpose of the framework is to "empower organisations to understand what is involved in a de-identification process," as well as to help organizations identify, evaluate and balance the resulting risks.
Full Story