Question

A retailer's analytics team wants an internal copy of customer transaction data to build purchasing-trend models. Business requirements state that analysts must never be able to identify individuals, yet the fraud investigation team must retain a controlled ability to re-link records back to specific customers when a confirmed fraud case is opened. As the privacy solutions engineer, which data transformation approach best satisfies both requirements?

Accepted Answer

Pseudonymize direct identifiers using a keyed tokenization scheme, storing the mapping key under strict access control available only to the fraud team, while giving analysts the pseudonymized dataset

Answer

Anonymize the entire dataset so no records can ever be re-linked, and require the fraud team to request original records from production when needed

Answer

Encrypt the identifier columns with a shared symmetric key distributed to both the analytics and fraud teams so either team can decrypt as necessary

Answer

Mask the identifiers with irreversible hashing (no salt) so the same customer always maps to the same value, allowing both teams to correlate records