Abstract:Background with rationaleThe Georgia Policy Labs’ mission is to improve outcomes for children and families by producing rigorous research with long-term government partners. A key component of this model is having secure access to research-ready, individual level data from multiple sources to answer government agencies’ questions within policy windows. Obtaining sensitive data from our partners requires significant relationship building, demonstrations of value, and assurances of our ability to mitigate all security and privacy concerns. Objectives Securely transfer and de-identify disparate individual level datasets with personally identifiable information from public entities. Clean data and store in a pristine data lake, made available for fast turn-around research. Ensure individual records can be matched across disparate organizations’ datasets. ApproachOur practices, infrastructure, data sharing agreements and security are built to support the intersection of data availability for researchers and security standards that give our partners ease. We highlight two solutions addressing security concerns while supporting our researchers, which can be used by other researchers using sensitive data. First, we discuss our multiple tiers of transfer and access that remove risk from identifiable data. Second, we share the double hash solution created for a partner who was not willing to share PII. We share the source code for our SHA3-512 double hash solution, which allows for matching of records across disparate datasets without receiving PII sensitive elements. ResultsWe created reliable matching values without the need for the actual social security numbers or other PII values on our side, enabling a large school district to share its student-level data with us. ConclusionThe balance of security and easy access for researchers is a common area of friction. Our security set-up and hashing solution allows others to remove this barrier for applied policy research.

Privacy Assessment of De-identified Opal Data: A report for Transport for NSW

Differentially Private Release of Public Transport Data: The Opal Use Case

Stop the Open Data Bus, We Want to Get Off

A Functioning Beta Solution to the Challenge of Opening Transit Payment System Transaction Data

Optimization of Privacy Budget Allocation In Differential Privacy-Based Public Transit Trajectory Data Publishing for Smart Mobility Applications

Towards Standardized Mobility Reports with User-Level Privacy

Privacy-Preserving Data Analysis for the Federal Statistical Agencies

Vulnerabilities in the use of similarity tables in combination with pseudonymisation to preserve data privacy in the UK Office for National Statistics' Privacy-Preserving Record Linkage

OCEAN: Open-source Collation of eGovernment data And Networks - Understanding Privacy Leaks in Open Government Data

Collection, usage and privacy of mobility data in the enterprise and public administrations

Privacy Preserving Techniques Applied to CPNI Data: Analysis and Recommendations

A survey on UK researchers' views regarding their experiences with the de-identification, anonymisation, release methods and re-identification risk estimation for clinical trial datasets

PABAU: Privacy Analysis of Biometric API Usage

Connecting the Dots: User Privacy is Not Preserved in ID-Removed Cellular Data

Finding Pearls in London's Oysters

PRIVEE: A Visual Analytic Workflow for Proactive Privacy Risk Inspection of Open Data

“Sharing Is Caring:” Australian Self-Trackers' Concepts and Practices of Personal Data Sharing and Privacy

An empirical study of privacy labels on the Apple iOS mobile app store

Research Ready Data Lakes: Protecting Privacy in Relatable Datasets

Data De-anonymization : From Mobility Traces to On-line Social Networks

Releasing Large-Scale Human Mobility Histograms with Differential Privacy