Howard Fienberg, Director of Government Affairs
CMOR – Promoting & Advocating for Survey & Opinion Research
http://www.cmor.org
White Paper for NSF Workshop on Data Confidentiality
How Survey and Opinion Researchers Handle Personally Identifiable
Information (PII)
As part of the research process, survey and opinion researchers gather
information about respondents' attitudes, opinions, and sometimes,
even behaviors. Interviewers often ask for demographic information
to help define the interest that the sample is likely to have in the
product, service, or issue being studied. This information is not
normally looked at by individual answers. Instead, each person's answers
are combined with those of many others reported as a group to the
client who requested the survey. Moreover, most research companies
destroy individual questionnaires at the end of the study, and names
and addresses of participants are separated from the answers if additional
tabulation of the results is done. Again, all of the personal records
are usually destroyed after the study is completed or the validation
check has been made, and all of a respondent's personally identifiable
information is kept strictly confidential.
“Privacy is our business”
Privacy is the cornerstone of the survey and opinion research profession.
While respondents will always have to buy goods or services in some
fashion, few respondents recognize any inherent need to respond to
(or value in responding to) surveys – not even the decennial
Census. If the profession violates respondent privacy, or is perceived
to have done so, respondents will stop cooperating with research efforts.
Moreover, every new data security breach makes respondents more wary
of research participation – even though research firms and organizations
are not the culprits. Every contact with respondents is therefore
an opportunity to reinforce the confidential nature of the research
process.
Thoughts for Workshop Participants
Survey and opinion researchers are often not on the cutting edge
of confidentiality techniques, being more pre-occupied with methodological
issues and compliance with existing laws and professional guidelines.
They are more reliant on advances in the information technology and
statistical fields.
The ideal “want” for survey and opinion researchers would
be methods to reliably de-identify PII, while still keeping it useful
for all the permutations of research and analysis. So what strides
have already been made recently, and what can be expected in the near
future, in the IT and statistical sciences, to accomplish this goal?
Also, what tools can be developed that will allow survey and opinion
research organizations to monitor and control compliance with their
privacy policy across their organization, and in their contractual
obligations with contractors, clients and research partners?