Before individual-level data obtained under a data permit is released to the permit holder, Findata processes it in a way that significantly reduces the possibility of identifying individuals.
Direct identifiers, such as names and personal identity codes, are removed from the dataset and replaced with codes. This is called pseudonymisation. In addition, precise data may be generalised. For example, a postcode may be replaced with a region, or a date of birth with a year of birth.
Pseudonymised data may only be processed in a secure environment without an internet connection. The permit holder commits to conditions that prohibit any attempts to identify individuals.
For statistical-level data requests, fully anonymous data is provided. This data describes population groups rather than individuals, and individuals cannot be identified from it.
Identifiable data is only released for particularly justified reasons.