What is a recommended practice for de-identification of offender data?

• A. Never de-identify
• B. De-identify or anonymize when appropriate
• C. De-identify all data
• D. De-identify only after 50 years

Answer: (B)

De-identification when appropriate protects privacy while keeping data usable. By removing or masking direct identifiers (like names or offender numbers) and replacing them with pseudonyms or aggregated values, you reduce the risk of re-identification while still allowing reporting and analysis. The “when appropriate” part matters because some workflows require identifiable information for case management, supervision, or investigations, so blanket de-identification isn’t suitable. De-identification or anonymization is the right approach when data can be used for reporting or research without needing to tie records to a specific person. Never de-identifying leaves privacy exposed, and waiting a fixed period like 50 years isn’t a reliable policy-driven approach.