Safe Aggregation of Personally Identifiable Information Data in Generally Available Aggregated Reports and CubesData Administration Agreement • April 24th, 2015
Contract Type FiledApril 24th, 2015The protection of individuals’ personally identifiable information (PII) in University of Washington (UW) information systems is regulated by federal and state privacy laws; yet, in the interest of transparency, the UW must publish aggregate reports to inform the public about the students it serves and the individuals it employs to fulfill its mission. While the aggregation of individual-level data into department- or university-level data significantly reduces the risk of disclosing PII, an accidental disclosure can nevertheless occur when aggregate reports are presented in a way that allows individuals to be identified, either directly or in combination with other available information. To comply with privacy laws, UW designated officials who aggregate or publish data at the UW must take steps to minimize the risk of disclosing PII.