Anonymization

Images are rich and complex because they contain multiple visual cues, such as faces, political symbols, or indications of health status. The main challenge of anonymization is therefore to protect the identities of depicted individuals and research participants without undermining key research insights or compromising legal and ethical compliance.   

From a legal and ethical standpoint, it is important to identify and define the most appropriate anonymization technique at the very beginning of the project, i.e., in the conceptual phase, so that appropriate measures can be implemented before images are collected. Deleting, anonymizing, or pseudonymizing data entails very different compliance steps. Therefore, when thinking about whether to anonymize, pseudo-anonymize or not anonymize at all, ask yourself the following questions since the beginning of the research:

Data Minimization
  • What kind of personal data do you need to reach the purposes of your research?
  • How many participants are involved in the project?
Data Retention
  • For how long do you need to keep the raw data for your research purposes?
  • When can anonymization be applied to the data?
Data Security
  • Where do you keep the raw data (on local servers or in cloud-based repositories)?
  • Are you planning to create one or more backup copy(ies) of the raw data?
  • Which anonymization technique is most suitable for the raw data?
  • Financial issues are to be considered at this stage.
Minimizing Harm
  • Are you confident that you can avoid or reduce potential participants’ risks associated with the images you are using and analyzing?
  • Can you effectively safeguard the dignity, safety, and privacy of your participants, without exposing identities, cultural contexts, or sensitive information?
  • Are you confident that you can avoid or reduce potential participants’ risks associated with the images you are using and analyzing?
  • Can you effectively safeguard the dignity, safety, and privacy of your participants, without exposing identities, cultural contexts, or sensitive information?
Transparency
  • Have you considered how and when to inform participants that their data will be deleted, anonymized, or pseudonymized?
  • Have you created a communication channel with participants for any issues related to their right to access their data or their right to be informed about the processing of personal data?
Privacy Risk Assessment
  • Is the pseudonymization or anonymization technique you would like to adopt aligned with the privacy risk degree you assessed?
  • Can you envisage any positive or negative impact on the risk assessed?
Research Approaches

Attention: anonymization is not the default. It depends on the research approaches you are using.

  • Does the research approach you are using allow the anonymization of the data you are collecting?
  • Are you aware that different research approaches require different ways of anonymizing data, which are often complex and difficult to implement?
External technical Solutions
  • Are you considering pseudonymizing or anonymizing data with the support of any third party (e.g., a software provider)? If so, check whether its terms and conditions align with the anonymization technique you intend to adopt and with other legal and ethical principles.
  • Define the respective privacy roles.