GDPR and Data anonymisation techniques

Stay updated with the latest data anonymization techniques / attacks and learn all about GDPR

Created byHackademy _

Last updated 6/2023

English

What you'll learn

Concepts and methodologies about databases anonymization
GDPR rules and compliances
Legislation regarding anonymity and EU citizens rights
Anonymize data

Course content

12 sections • 71 lectures • 5h 58m total length

Privacy and personal data5:59
Learn about personal data, Quasi-identifiers and how 87% of individual in the United Stated can be identified just by gender, birth date and postal code.

Link to video: http://www.bbc.com/news/av/world-asia-china-42248056/in-your-face-china-s-all-seeing-state
Privacy in Health5:32
A high percentage of people admit adopting privacy protection behaviours because they are concerned about how and for what reasons their clinical data (venereal, genetic, disabling, psychiatric, etc.) are used and shared, even within a single hospital.
Legislation background4:54
The legislation we are reviewing focus on the European law.
GDPR (General Data Protection Regulation)13:10
The EU General Data Protection Regulation (GDPR) is the most important change in data privacy regulation in 20 years.
Chapter PDF download8:14
Missed a step or would you like to review certain aspects ? Download the PDF with presentation notes and some extra comments to help you out.

GDPR conformity1:03
Failure to comply with GDPR2:49
Article 4 - Definitions1:23
Learn about GDPR main definitions and terms.
Article 24 and 26 - Responsibilities1:05
Responsibilities of the controller and joint controllers for data treatment.
Article 37 - Appointment of Data Protection Officer (DPO)1:03
A Data Protection Office is required in some situations, find out about his / her tasks and when it's required.
Article 45 and 46 - Data transferences1:05
Conclusion regarding GDPR articles1:02

Anonymization processes9:15
Learn what anonymization, pseudonymization and de-identification are about.
Techniques to Anonymise Data8:58
Understand a set of techniques that promote the dilution of information veracity, eliminating stronger links between the data on each individual.
De-identification software ARX1:35
ARX is a comprehensive open source software for anonymising sensitive personal data. It supports a wide variety of privacy and risk models, methods for transforming data and methods for analysing the usefulness of output data.
Random Data Generator5:54
Databases are a collection of data that can have multiple inputs and a myriad of uses, the richer the information the more valuable the dataset will be.
Learn how to generate a dataset.
Chapter PDF download8:46
Missed a step or would you like to review certain aspects ? Download the PDF with presentation notes and some extra comments to help you out.
Checkpoint0:06

Create a new project and load generated dataset5:56
This work focus on a specific dataset anonymization, by analysing the data we choose the best methods and practices in order to achieve an output that is anonymised but still is useful for consultation, statistic or other approaches.
Configuration and testing of anonymization/privacy models7:52
Several configurations and privacy models were selected and tested, nevertheless the described settings proved to be the more balanced outcome regarding the dataset integrity and anonymity.
Further settings and tweaks2:12
To increase the anonymization of the dataset we are applying other models.
Results3:09
There’s no secret recipe to anonymise data, it will always depend on the ultimate goal and audience of the anonymised output.
Anonymization through synthetic generation of data13:26
Anonymization of Datasets with Privacy, Utility and Risk Analysis

Presentation13:50
Data generation plays a big role in data anonymization. It allows users to quickly generate several amounts of data in order to proceed with anonymization processes, it also has more uses like software testing and the choice of the tool should focus on the goal of the data.

In order to best understand how this process work we analysed several tools and compared results to identify possible problems and have an outcome regarding on what could be improved.
Stack Overflow Dataset1:45
With more than 100,000 responses fielded from 183 countries and dependent territories, our 2018 Annual Developer Survey is the most comprehensive survey of software developers ever conducted. We examined all aspects of the developer experience from career satisfaction and job search to education and sound preference when coding.
Download Full Data Set (CSV) https://insights.stackoverflow.com/survey/?utm_source=so-owned&utm_medium=blog&utm_campaign=dev-survey-2017&utm_content=blog-link&utm_term=data
Mockaroo8:55
Databake7:45
Generate synthetic data at databake.io according to our original dataset schema.
Anonymity benchmark (original dataset)4:44
The goal with ARX is not to anonymise data but to to perform an Utility and Risk analysis.
Synthetic data injection8:11
Conclusions and notes3:53

Computer security concepts8:27
We will review some aspects regarding computer security concepts and tackle some questions.
Computer security concepts Quiz
Anonymization operations3:17
Anonymization operations question
Re-identification Risk3:07
Re-identification Risk calculation
Equivalent classes5:06
Equivalent class
Chapter PDF download5:00
Missed a step or would you like to review certain aspects ? Download the PDF with presentation notes and some extra comments to help you out.
Introduction to email services and PGP7:13
Email security using PGP11:54
Digitally sign your emails with PGP
Certification Authorities using OpenSSL8:46
We are using a CentOS virtual machines to get our work done.
You can install the OS on your computer or run it on a Virtual Machine, some images are already available at: https://www.osboxes.org/centos/

The password is: osboxes.org Got lost or want to review the steps ?
Download the PDF with all the content and comments.
Create and configure the X.509 certificates12:06
Summary3:51
Review Questions

Analytics1:26
Website analytics must follow GDPR policies, in this video you'll learn what they are and how they work.
Contact forms1:15
Adapt your contact forms to be GDPR compliant.
Cookies notice0:49
Mostly all websites use cookies, find out how to add a cookies notification bar.
Right to be forgotten1:16
Users have the right to have their data erased, find out how it works.
Privacy page0:37
Privacy pages are required, learn how to set yours.
Conclusion0:29
Now you have the knowledge to make almost any website GDPR compliant.

Service and technologies4:22
We are setting a web service that will allow users to upload profile and group photos.
Then the API will check if the group photo contains a profile picture.
Plugin deployment4:51
For the time being this technology is available as a WordPress plugin.
It's best if you have WordPress running locally or externally on a web server, you can also use the sandbox website available at facerecognitionwp.com/sandbox
API deployment7:43
Here we will deploy our API coded in Python using the Flask library
Review how the API works8:16
The API was coded in Python, this quick and efficient technology is the core of our web service.
On this lesson we will review how the API works and how to deploy it.

You will need to install Python 3 among some other libraries.
Review on how the web Interface works11:16
In order to interact with our API we are building a simple but efficient web interface.
It will be mostly based in HTML, Javascript and some CSS to style it.
Deployment on Amazon's AWS5:28
We need an API that's always available and working, therefore we are using Amazon's AWS platform to run our web service.
We will configure the virtual instance, all the libraries and assets needed - patience required.

Requirements

You are required to have a basic computer knowledge

Description

The European Union's new General Data Protection Regulation demands that stored data on people in the EU undergo either an anonymization or a pseudonymization process.

Privacy, personal data and according legislation
Privacy in Health
The EU General Data Protection Regulation (GDPR) that is the most important change in data privacy regulation in 20 years

Data anonymization is a type of information sanitisation whose intent is privacy protection. It is the process of either encrypting or removing personally identifiable information from data sets, so that the people whom the data describe remain anonymous:

Learn how to apply methodologies to anonymise your data and keep users secure.
Use specialized software to anonymise your data
Techniques to Anonymise Data
Generate random data

All the theory will be supported with practical exercises to help you to fully comprehend the theory and methodologies.
You can download all the presentation files (.PDF) to take it with you and read when it suits you best.

More than 4 hours and 30 minutes of video content.
Keep your data safe
Apply IT methodologies and requirements to respect the law
Your answers and exercises will be reviewed by the instructors
Custom and personal feedback guaranteed via posts or private message

You will also learn how use most of Google's full capacities, use other search engines to fetch sensitive information and validate if credentials are compromised among other valuable information and knowledge.

This course is constantly reviewed and updated with new lessons.

Who this course is for:

If you want / need to learn how to anonymise databases
You want to learn about GDPR and what it's about

GDPR and Data anonymisation techniques

What you'll learn

Explore related topics

Course content

Introduction5 lectures • 38min

GDPR concept and laws7 lectures • 10min

Anonymization principles and ARX6 lectures • 35min

Practical anonymization of a Dataset and Risk Assessment5 lectures • 33min

Re-identification attack types3 lectures • 12min

Anonymization through synthetic generation of data7 lectures • 49min

Practical Exercises10 lectures • 1hr 9min

GDPR on websites6 lectures • 6min

Build your Facial Recognition web service6 lectures • 42min

Google ethical hacking6 lectures • 26min

Requirements

Description

Who this course is for: