What 'De-identified' Actually Means

"Don't worry — all data is de-identified." Vendors say it like a magic spell. Here's what the spell actually means.

In plain English: de-identified data has had the obvious labels removed — names, emails, student ID numbers. The idea is that what's left can't reasonably be traced back to a specific child.

Now the part the spell skips: removing labels is not the same as removing identity. A dataset of "anonymous" 8th graders with timestamps, classroom codes, and detailed learning histories can often be re-identified by combining it with other information. Researchers have demonstrated this over and over. De-identification is a spectrum, not a switch.

So when a vendor says the word, ask three follow-ups. What exactly did you remove? What did you keep? And who decided this counts as de-identified — you, or an independent standard? The answers tell you whether you're hearing a real practice or a soothing phrase.

There's also a simpler frame for teachers: treat "de-identified" as "harder to trace," never as "impossible to trace." That single shift in thinking prevents most mistakes. You still strip names before prompting. You still prefer tools your school vetted. The label on the box doesn't change the discipline.

Words matter in compliance. Make sure the words mean what you think they mean.

I explain frameworks; I don't give legal counsel.