What principle supports using anonymized data when possible to protect privacy in law enforcement data sharing?

• A. Public disclosure with no anonymization.
• B. Anonymization and limited access to reduce privacy risk.
• C. Sharing raw data with all personnel.
• D. Retaining data indefinitely without mitigation.

Answer: (B)

Using anonymized data to protect privacy relies on limiting exposure of identifiable information and restricting who can see it. When data are de-identified, obvious identifiers such as names, addresses, and other direct links are removed or masked, which lowers the chance someone could trace the data back to a person. Pairing that with restricted access—so only authorized personnel who need the data for legitimate purposes can use it—further reduces privacy risks by preventing broad exposure or misuse.

This approach is why the option that emphasizes anonymization and limited access is the best fit. It balances the need to share information across law enforcement with the obligation to safeguard individuals’ privacy. Other options would increase risk: sharing raw data with everyone can lead to leakage of sensitive information, and keeping data indefinitely without safeguards keeps potential privacy threats alive. Publicly disclosing data with no anonymization would plainly expose individuals.