De-identification is removing or transforming information in a dataset so the people in it can no longer be readily identified. Methods range from deleting direct identifiers such as names and emails to generalizing dates and locations. Whether the result counts as de-identified depends on the law that applies.
Why it matters when licensing company data
Under HIPAA, health data is de-identified either by removing 18 listed identifiers (the Safe Harbor method) or by an expert determining that the re-identification risk is very small. Other laws use different tests, and company records hide identifiers in places a simple filter misses: signatures, ticket bodies, file paths, photos and audio.
Buyers will ask what method was used and how it was checked. See how to de-identify company data before licensing.
Source
NIST IR 8053: De-Identification of Personal Information. Definition reviewed November 7, 2026 by Origin Data Partners.