<abstract xmlns="http://www.w3.org/1999/xhtml"><p>Many statistical agencies face the challenge of maintaining the confidentiality of respondents while providing as much analytical value as possible from their data. Datasets relating to businesses present particular difficulties because they are likely to contain information about large enterprises that dominate industries and may be more easily identified. Agencies therefore tend to take a cautious approach to releasing business data (e.g., trusted access, remote access and synthetic data). The Australian Bureau of Statistics has developed a remote server, called TableBuilder, which has the capability to allow users to specify and request tables created from business microdata. The tables are confidentialised automatically by perturbing cell values, and the results are returned quickly to the users. The perturbation method is designed to protect against attacks, which are attempts to undo the confidentialisation, such as the well-known differencing attack. This paper considers the risk and utility trade-off when releasing three Australian Bureau of Statistics business collections via its TableBuilder product.</p></abstract>

Many statistical agencies face the challenge of maintaining the confidentiality of respondents while providing as much analytical value as possible from their data. Datasets relating to businesses present particular difficulties because they are likely to contain information about large enterprises that dominate industries and may be more easily identified. Agencies therefore tend to take a cautious approach to releasing business data (e.g., trusted access, remote access and synthetic data). The Australian Bureau of Statistics has developed a remote server, called TableBuilder, which has the capability to allow users to specify and request tables created from business microdata. The tables are confidentialised automatically by perturbing cell values, and the results are returned quickly to the users. The perturbation method is designed to protect against attacks, which are attempts to undo the confidentialisation, such as the well-known differencing attack. This paper considers the risk and utility trade-off when releasing three Australian Bureau of Statistics business collections via its TableBuilder product.

Prospects for Protecting Business Microdata when Releasing Population Totals via a Remote Server

Journal of Official Statistics

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Many statistical agencies face the challenge of maintaining the confidentiality of respondents while providing as much analytical value as possible from their...

Prospects for Protecting Business Microdata when Releasing Population Totals via a Remote Server

Published Online: Jun 18, 2019

Page range: 319 - 336

Received: Sep 01, 2016

Accepted: Jan 01, 2019

DOI: https://doi.org/10.2478/jos-2019-0015

Keywords
Business data, online access, perturbation, remote server, statistical disclosure control

© 2019 James Chipperfield et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Prospects for Protecting Business Microdata when Releasing Population Totals via a Remote Server

Published Online: Jun 18, 2019

Page range: 319 - 336

Received: Sep 01, 2016

Accepted: Jan 01, 2019

DOI: https://doi.org/10.2478/jos-2019-0015

KeywordsBusiness data, online access, perturbation, remote server, statistical disclosure control

© 2019 James Chipperfield et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Keywords
Business data, online access, perturbation, remote server, statistical disclosure control