摘要 |
Provided are a de-identification device and a de-identification method in which all data satisfy requested levels of anonymity for each, and which prevents loss of information value that is based on abstraction of the entire data collection. This de-identification device includes: de-identification means for performing de-identification processing in which a group of data is treated as a processing unit for a data collection which includes two or more data; anonymity level setting means for setting an adaptive anonymity level for each group; and anonymity assessment means for assessing whether or not a group satisfies the set adaptive anonymity level. The de-identification means, on the basis of the assessment result of the anonymity assessment means, additionally performs de-identification processing for the data collection for which de-identification processing has been performed. |