Interactive publication
Back to the cataloguePrivacyCase 09 of 12
Resolution degradation policy
When a cell fails a privacy check, the correct response is to roll it up to a coarser resolution and re-check, not to drop it or leave it at the original resolution with a suppressed value, either of which loses coverage or gives a false sense of the original grain.
Class
Case to account for
Affects
3 conversions
01
Detection
Any cell in the output failing the k-anonymity/DP check should trigger a resolution rollup; audit for cells that were dropped or suppressed-in-place instead.
02
Mitigation
01
Implement automatic iterative rollup to h3ToParent until the privacy threshold is met
02
Document, per output row, the resolution actually reported versus the resolution originally requested
03
Affected conversions
PointH3
OPENRasterH3
OPENAdmin polygonsH3 (weighted crosswalk)
OPENMore in Privacy
Consent-based precision reductionDeclared unit below the precise-location thresholdDevice trajectory exposureDifferential privacy noise calibrationHousehold-level targeting riskK-anonymity thresholdsMinimum aggregation windowRegional privacy restrictionsSmall-cell re-identification riskSparse-audience suppressionTemporal leakage