The FTC came out swinging on data matters in mid-July. The federal trade regulator and consumer protection body has announced, pointedly, that "anonymized" or "aggregated" data is often not so anonymous, and can easily be used to identify an actual person. The agency says that inaccurately assuring consumers about a company's data practices by claiming to use anonymized or aggregated data can violate the Federal Trade Act and constitute an unfair trade practice.
Why It Matters
Merely rendering data anonymous is generally not enough to treat it as legally "anonymized." It has to be incapable of being re-formulated, and thus preclude the possibility that it can be used again to identify particular individuals. State privacy laws and those of other countries already have standards in them to help guide a decision about whether data are truly "anonymous" and thus considered non-personal (and non-regulated). Any company that relies on downstream use of data would be well served to understand how that data is anonymized and whether the process can be reversed in any way that would bring the data back within the scope of any privacy laws. And now, claiming that data are anonymized will also carry the weight of a trade promise, one which the FTC says it will enforce.