An industry-funded engagement for the Clinical Research Unit of Nestlé in Lausanne: we anonymize the data of a clinical nutrition study so that it can be kept and reused once the original, identifiable data has been deleted.
The compliance standard is the EDPB guidance on anonymisation under the GDPR. We derive and document the protection thresholds ourselves and set them at the least restrictive level that still meets the EDPB criteria. Over-anonymization counts as a failure here: the study’s measurements are the analytical payload and must be preserved, not coarsened. We use classical statistical disclosure control and test both identity and attribute disclosure.
The deliverables are the anonymized dataset and an anonymization report with a transformation record for every variable. The project runs alongside our other Nestlé engagement. Oscar Thees and Roman Müller lead it operationally, with Prof. Dr. Matthias Templ (FHNW) as strategic lead.