Randomly shifting coordinates to protect privacy can make a point look like it's on the wrong side of a road
Aliases: spatial jitter · coordinate perturbation · geomasking
What it is
Location jitter, or coordinate perturbation, randomly shifts each coordinate before release to blur its true place. It reduces precise-location risk but changes relations to roads, boundaries, facilities, and other points. At scales comparable to the shift, apparent hotspots or membership can be artifacts of the protection method.
Why it happens
Random displacement usually retains only broad distribution, not a point's true position. As analysis scale approaches jitter radius, added noise becomes inseparable from signal: points cross boundaries, fall by the wrong road or on water, and tight clusters disperse. Releasing multiple randomizations or retaining relative trajectories can also let attackers average or link back to real locations.
Where it stops holding
For area totals far larger than the displacement range, bias may be acceptable, but it must be tested at the actual task scale. Jitter is not a universal substitute for aggregation, access control, or small-count suppression. A uniform distance affects narrow regions, coastlines, and either side of a boundary unevenly.
Applying it
- Set the minimum interpretable spatial scale well above the maximum displacement, and disclose the rule and limit in the legend or method note.
- Recompute area membership, hotspots, and distance measures after perturbation; do not reuse labels calculated on the original points.
- Verify original controlled data against perturbed data at the target scale. If hotspots, rankings, or policy regions change, aggregate instead or do not show that scale.
Related
- Same group: U12.06.1 Precise coordinates can reveal homes and daily routines · U12.06.2 Aggregating to areas can reduce re-identification risk · U12.06.3 Sparse regions can remain uniquely identifying after aggregation · U12.06.5 Aggregation granularity must be set by the sparsest region, not average density
- Nearby: U12.02.3 Area boundaries can change apparent spatial patterns · U3.06.2 Time-series gaps should remain visible rather than be skipped
- Search terms:
location jitter·coordinate perturbation·geomasking
Cards in the same group
- U12.06.1Recurring nighttime coordinates alone can reveal exactly where someone lives and works
- U12.06.2Rolling precise points up into area counts can hide individuals inside a shared number
- U12.06.3In a sparsely populated area, an aggregated count can still point to exactly one person
- U12.06.5Aggregation granularity must be set by the sparsest region, not average density