U12.06.2Aggregating to areas can reduce re-identification riskdesign

Rolling precise points up into area counts can hide individuals inside a shared number

Aliases: spatial aggregation · geographic masking · privacy preservation

What it is

Spatial aggregation combines people or precise points into counts, rates, or summaries for a neighborhood, grid, administrative region, or time window. By hiding exact location and having multiple records contribute to one value, it reduces the opportunity to trace a display back to an individual.

Why it happens

Re-identification relies on distinctive combinations. Aggregation enlarges the candidate set behind every visible value and discards exact coordinates and route order. A grid total indicates how much happened in an area, not who was where. It also lowers resolution: local hotspots, boundary differences, and short-term variation are averaged away, so privacy protection and analytical detail are two sides of the same operation.

Where it stops holding

Aggregation reduces risk rather than creating absolute anonymity. Few records, rich auxiliary data, or repeated filtering can still expose people. Different grids and administrative boundaries can produce different patterns, so a result at one scale is not the only spatial truth. Excessively coarse regions can make service decisions unusable.

Applying it

  • Choose the coarsest space and time resolution that answers the task, and set a minimum record threshold for every displayed unit.
  • Merge, suppress, or delay low-count units; retest the threshold after every permitted filter combination.
  • Verify every public query and export route: no result should split a small set back into one or a few records.

Related

  • Same group: U12.06.1 Precise coordinates can reveal homes and daily routines · U12.06.3 Sparse regions can remain uniquely identifying after aggregation · U12.06.4 Location jitter introduces false conclusions at small scales · U12.06.5 Aggregation granularity must be set by the sparsest region, not average density
  • Nearby: U12.02.3 Choropleth boundaries can change the apparent pattern · U8.05.2 Small counts should not be published as precise values
  • Search terms: spatial aggregation · geographic masking · re-identification risk

Cards in the same group

Quick Actions

Share

Share this page

ios_share

https://hci.top/en/handbook/U12.06.2