International Business Machines Corporation

Naoise Holohan

Stefano Braghin

Spyridon Antonatos

Pol MacAonghusa

Killian Levacher

Rahul Nair

Martin Stephenson

Pol Mac Aonghusa

Systems, computer-implemented methods, and computer program products that can facilitate sensitive data policy recommendation are provided. According to an embodiment, a system can comprise a memory that stores computer executable components and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise an extraction component that can employ an artificial intelligence model to extract compliance data from a data source. The computer executable components can further comprise a recommendation component that can recommend a sensitive data policy based on the compliance data. In some embodiments, the recommendation component can further identify one or more sensitive data entities of a sensitive data dataset that are affected by actionable obligation data of the data source.

Sensitive data policy recommendation based on compliance obligations of a data source

Embodiments include a method for one or more processors to receive an organic dataset and a domain knowledge base. The one or more processors identify private data entities present within the organic dataset. The one or more processors determine statistical properties of the private data entities identified within the organic dataset. The one or more processors create a plurality of test data templates by removing the private data entities from the organic dataset. The one or more processors select from the domain knowledge base, synthetic data entities that match a data type of the removed private data entities, respectively, and align with the statistical properties of the private data entities, and the one or more processors generate synthetic test data by inserting, respectively, the synthetic data entities of the matching data type for the removed private data entities in the test data templates.

Synthetic deidentified test data

Embodiments for performing consistent data masking in a distributed computing environment by a processor. A dictionary based data masking operation is performed on one or more datasets with causal ordering of the one or more datasets to enable reconstruction of a state of the one or more dictionaries for the one or more datasets.

Providing consistent data masking using causal ordering

Various embodiments are provided for linking of anonymized datasets in a computing environment are provided. A number of linking records may be identified between an anonymized dataset and one or more non-anonymized datasets of a knowledge base according to one or more equivalence classes and a generalization level.

Fast linking of anonymized datasets

Embodiments for watermarking anonymized datasets using decoys in a computing environment are provided. One or more decoy records may be embedded in an anonymized dataset such that a re-identification attack on the anonymized dataset targets the one or more decoy records.

Watermarking anonymized datasets by adding decoys

Embodiments for data anonymity by a processor. A dataset may be transformed into an anonymous dataset by applying a differential privacy operation and a clustering operation to the dataset.

Growing community of inventors

Dublin, Ireland

Naoise Holohan