03 · What You Need to Know
How to Protect Participant Identity Before AI Processing
What Does De-Identification Mean in Research?
De-identification refers broadly to processes intended to remove, replace, or reduce information that could identify individuals in a dataset.
In qualitative research, this often involves modifying interview transcripts so that names, contact details, and other identifying information are not unnecessarily disclosed to people or systems processing the data.
However, de-identification is not always equivalent to anonymization. The legal meaning of these terms depends on the applicable jurisdiction and regulatory framework.
The UK Information Commissioner's Office distinguishes anonymization from pseudonymization. Pseudonymized information remains personal data when individuals can still be identified through additional information held separately.
Researchers should therefore describe what was actually done to the transcripts rather than assuming that replacing names establishes anonymity.
What Is the Difference Between Anonymization and Pseudonymization?
Pseudonymization
Replacing or transforming identifying information while retaining the possibility of identifying individuals using separately held information.
Anonymization
Processing information so that individuals are no longer identifiable under the applicable legal standard and reasonably relevant identification circumstances.
Suppose a researcher replaces "Maria Santos" with "Participant P04" but retains a separate file linking P04 to Maria's identity. This is ordinarily an example of pseudonymization rather than complete anonymization.
Even if the linking file is not shared, the transcript may still contain enough contextual information to identify the participant.
Effective anonymization requires consideration of the remaining information and the possibility of identification through other available sources. It cannot be established merely by confirming that a name has been removed.
What Are Direct and Indirect Identifiers?
Direct identifiers are details that can identify an individual relatively directly, such as a full name, personal email address, or telephone number.
Indirect identifiers are details that may identify someone when considered together or combined with external information.
The UK Data Service emphasizes that qualitative interview transcripts are particularly vulnerable to identification through narrative context. A distinctive professional role, unusual career history, or highly specific event may reveal a person's identity even after names have been removed.
| Identifier Type |
Illustrative Information |
Possible Treatment |
|
Direct identifier
|
Participant's full name |
Replace with a participant code or descriptive label. |
|
Contact information
|
Personal email address or telephone number |
Remove unless necessary for the authorized processing purpose. |
|
Institutional identifier
|
Name of a university or department |
Generalize where identification risk warrants it. |
|
Professional identifier
|
A unique academic or administrative position |
Consider replacing with a broader role description. |
|
Contextual identifier
|
A distinctive workplace incident or career history |
Assess whether the combination of details could reveal identity. |
|
Third-party identifier
|
Names or identifying details of colleagues and students |
Remove or replace when unnecessary for the analysis. |
The appropriate treatment depends on the study. A university name may be unnecessary in one project but central to a comparative institutional case study.
Researchers should reduce identification risk without automatically deleting information essential to the research question.
What Is Jigsaw Identification?
Jigsaw identification occurs when separate pieces of information can be combined to identify someone, even though none of those details necessarily identifies the person alone.
Consider a transcript describing a participant as the only female dean of a particular faculty at a small university who assumed the position in a specific year.
Removing the participant's name may offer little protection if those details can be matched with publicly available institutional records.
The UK Data Service identifies this type of contextual identification as an important concern in qualitative text data. It recommends careful assessment of distinctive events, occupations, locations, and narrative details.
Researchers should consider what a reasonably informed recipient could infer from the complete transcript, not merely whether a list of obvious identifiers has been removed.
Why Is De-Identification Important Before AI Processing?
Submitting a transcript to an external AI service may expose its contents to additional processing infrastructure, retention arrangements, or authorized provider personnel.
Reducing unnecessary identifying information before transfer can limit the amount of personal data disclosed and reduce some consequences of unauthorized access.
De-identification is also consistent with the principle of data minimization, which generally favors processing only the personal information necessary for a legitimate purpose.
However, the benefit depends on the actual data remaining in the transcript. Replacing names while retaining uniquely identifying contextual information may provide only limited protection.
Researchers must separately determine whether external AI processing of confidential research information is permitted under the study's governing requirements.
Does De-Identification Automatically Make a Transcript Safe to Upload?
No. De-identification reduces certain privacy risks but does not necessarily eliminate them.
A transcript may remain identifiable through contextual details. The AI service may also have retention, access, or secondary-use arrangements that are incompatible with the research protocol.
Moreover, information that is not personally identifying may still be confidential. A transcript describing unpublished institutional decisions, proprietary processes, or sensitive organizational matters can require protection even when no participant is identifiable.
Watch Out
Do not treat the replacement of names with participant codes as permission to upload transcripts to any AI platform. De-identification, authorization for processing, and provider security are separate requirements.
Can AI Automatically De-Identify Research Transcripts?
AI and rule-based systems can assist by detecting names, addresses, dates, organizations, and other potentially identifying expressions.
However, automated detection is imperfect. Systems may miss indirect identifiers, misunderstand context, or remove information that is not actually identifying.
The UK Data Service recommends supplementing automated anonymization with careful review. It also warns researchers to ensure that tools used for de-identification do not themselves transmit sensitive data to unauthorized external services.
This creates an important practical distinction: using a locally operated tool to identify sensitive information is different from uploading an identifiable transcript to an external AI service and asking that service to anonymize it.
In the second situation, the original identifiable information has already been transferred before de-identification occurs.
How Can Researchers De-Identify Transcripts Without Losing Important Context?
Qualitative research depends on contextual information. Removing too much detail can make participants' experiences difficult to interpret or prevent meaningful comparisons.
For example, replacing every institutional role with "employee" may conceal differences between classroom teachers, department chairs, and senior administrators.
A more useful approach may be to retain analytically relevant categories while removing unnecessarily precise identifying details.
| Original Detail |
Possible Replacement |
Information Preserved |
| "I am the dean of the College of Education at University X." |
"I hold a senior academic leadership position at a university." |
Senior leadership responsibility. |
| "I started teaching at University X in August 2017." |
"I began teaching at the institution several years ago." |
General professional experience. |
| "Professor Maria Santos introduced the policy." |
"A faculty colleague introduced the policy." |
The involvement of a colleague. |
These replacements are illustrative, not universally appropriate. The researcher should determine which details are necessary for the analysis and which create disproportionate identification risks.
Where generalization removes analytically relevant information, the research team may need a more restricted processing arrangement rather than excessively altering the dataset.
Should Researchers Keep an Original and a De-Identified Version?
Maintaining a restricted original transcript and a separate de-identified working copy is often useful when permitted by the study's data management arrangements.
The original preserves the recorded account for verification and methodological accountability. The working copy can reduce unnecessary exposure during analysis or external processing.
Where participant codes are used, the file linking those codes to identities should be stored separately with restricted access.
Researchers should document substantive modifications so that important analytical passages can be traced to the source evidence without unnecessarily disclosing identities.
Retention periods and access permissions should follow the approved research protocol and applicable institutional or legal requirements.
What Does Data Protection Guidance Say About De-Identification?
The UK Information Commissioner's Office emphasizes that pseudonymized information remains personal data when identification remains possible using additional information.
The UK Data Service provides guidance specifically for qualitative text, noting that removing direct identifiers is rarely sufficient when distinctive narrative details remain.
In the United States, the Department of Health and Human Services provides de-identification guidance under the HIPAA Privacy Rule, including the Safe Harbor and Expert Determination methods.
Those HIPAA methods apply within their specific regulatory scope and should not be treated as universal requirements for all educational or social science research.
The guidance nevertheless illustrates an important principle: de-identification requires assessment of identification risk, not simply deletion of a few obvious fields.
Under Philippine law, the Data Privacy Act of 2012 provides a framework for protecting personal information and establishing accountability for processing. Researchers should determine which provisions apply to their institution, data, and intended AI processing arrangement.