An indirect identifier is a value which cannot be used to identify an individual on its own, but could be identifying if combined with other indirect identifiers.
Indirect identifiers are similar to quasi-identifiers, however some organizations, including Eurostat and Privitar, distinguish between the two on the basis of how likely it is that the value could be used to re-identify an individual. For example, date of birth and postcode would be considered quasi-identifiers, as they are quite likely to be known by others and so could be used in a linkage attack. Whereas a value not widely known, for instance an internally generated value like a payment plan category, might be considered an indirect identifier.
Ready to learn more?
Our team of data privacy experts are here to answer your questions and discuss how data privacy can fuel your business.