Jusletter IT

Analysing combined data sets can result in significant added value for many organisations, but the GDPR has put strict constraints on processing personal data. Anonymization by using Multi-Party Computation (MPC) however may offer organizations some relief of the perceived burden of GDPR under specific conditions. In this paper, we will explain the mechanisms behind this technology and illustrate its use by a health care case where medical data have to be combined for creating a prediction model, without revealing any sensitive personal data. We will argue why the use of this type of MPC would allow us to anonymize the highly sensitive personal data within the specific boundaries of the case and conclude our paper with some reflection on MPC in the context of the GDPR.