k-Anonymity in Practice: How Generalisation and Suppression Affect Machine Learning Classifiers
Not on the map. Why?
Abstract (arXiv)
The protection of private information is a crucial issue in data-driven research and business contexts. Typically, techniques like anonymisation or (selective) deletion are introduced in order to allow data sharing, e. g. in the case of collaborative research endeavours. For use with anonymisation techniques, the k-anonymity criterion is one of the most popular, with numerous scientific publications on different algorithms and metrics. Anonymisation techniques often require changing the data and thus necessarily affect the results of machine learning models trained on the underlying data. In this work, we conduct a systematic comparison and detailed investigation into the effects of different k-anonymisation algorithms on the results of machine learning models. We investigate a set of popular k-anonymisation algorithms with different classifiers and evaluate them on different real-world datasets. Our systematic evaluation shows that with an increasingly strong k-anonymity constraint, the classification performance generally degrades, but to varying degrees and strongly depending on the dataset and anonymisation method. Furthermore, Mondrian can be considered as the method with the most appealing properties for subsequent classification.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 2 of its 46 references that are in the map. First posted on arXiv 9 Feb 2021.
Builds on
2 of 46 references.
References · 2
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,120
- 2020The Limits of Differential Privacy (and its Misuse in Data Release and Machine Learning)cited by 22
Built on by
Citing papers per year: 2021: 1; 2022: 2; 2023: 4; 2024: 2; 2025: 2; 2026: 1.
12 papers.
- 2022The privacy issue of counterfactual explanations: explanation linkage attackscited by 20
- 2024Synthetic Data: Revisiting the Privacy-Utility Trade-offcited by 6
- 2023Energy cost and machine learning accuracy impact of k-anonymisation and synthetic data techniquescited by 2
- 2023Privacy-Preserving Taxi-Demand Prediction Using Federated Learningcited by 2
- 2022Anonymous Bandits for Multi-User Systemscited by 1
- 2023Comparison of machine learning models applied on anonymized data with different techniquescited by 1
- 2024Intermediate Outputs Are More Sensitive Than You Thinkcited by 1
- 2025Multi-Objective Optimization-Based Anonymization of Structured Data for Machine Learning Applicationcited by 1
- 2021HyObscure: Hybrid Obscuring for Privacy-Preserving Data Publishingcited by 0
- 2023Delete My Account: Impact of Data Deletion on Machine Learning Classifierscited by 0
- 2025AI Security Map: Holistic Organization of AI Security Technologies and Impacts on Stakeholderscited by 0
- 2026AnonShield: Scalable On-Premise Pseudonymization for CSIRT Vulnerability Datacited by 0
- 2026AnonShield: Scalable On-Premise Pseudonymization for CSIRT Vulnerability Data5 Apr 2026
- 2025AI Security Map: Holistic Organization of AI Security Technologies and Impacts on Stakeholders12 Aug 2025
- 2025Multi-Objective Optimization-Based Anonymization of Structured Data for Machine Learning Application2 Jan 2025
- 2024Intermediate Outputs Are More Sensitive Than You Think1 Dec 2024
- 2024Synthetic Data: Revisiting the Privacy-Utility Trade-off9 Jul 2024
- 2023Delete My Account: Impact of Data Deletion on Machine Learning Classifiers17 Nov 2023
- 2023Privacy-Preserving Taxi-Demand Prediction Using Federated Learning14 May 2023
- 2023Comparison of machine learning models applied on anonymized data with different techniques12 May 2023
- 2023Energy cost and machine learning accuracy impact of k-anonymisation and synthetic data techniques11 May 2023
- 2022Anonymous Bandits for Multi-User Systems21 Oct 2022
- 2022The privacy issue of counterfactual explanations: explanation linkage attacks21 Oct 2022
- 2021HyObscure: Hybrid Obscuring for Privacy-Preserving Data Publishing15 Dec 2021