id: "SI-19(08)" title: "Motivated Intruder" family: "SI" family_name: "System and Information Integrity" sort_id: "si-19.08" priority: "P1" implementation_level: "system" parent: "SI-19" enhancement: True
Statement
Perform a motivated intruder test on the de-identified dataset to determine if the identified data remains or if the de-identified data can be re-identified.
Guidance
A motivated intruder test is a test in which an individual or group takes a data release and specified resources and attempts to re-identify one or more individuals in the de-identified dataset. Such tests specify the amount of inside knowledge, computational resources, financial resources, data, and skills that intruders possess to conduct the tests. A motivated intruder test can determine if the de-identification is insufficient. It can also be a useful diagnostic tool to assess if de-identification is likely to be sufficient. However, the test alone cannot prove that de-identification is sufficient.
Assessment Objective
a motivated intruder test is performed on the de-identified dataset to determine if the identified data remains or if the de-identified data can be re-identified.
System and information integrity policy
system and information integrity procedures
personally identifiable information processing policy
de-identification procedures
system configuration
motivated intruder test procedures
de-identified datasets
system security plan
privacy plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records
Organizational personnel responsible for de-identifying the dataset
organizational personnel with information security and privacy responsibilities
Motivated intruder test