De-identification is not a one-time event.
Datasets change. Recipients change. Regulatory context evolves. A determination issued six months ago may not reflect the data as it exists today. Continuous re-assessment keeps the determination current and the documentation audit-ready.
Assessments should evolve with the data
A determination is a statement about re-identification risk at a specific point in time, for a specific scope. When the data changes, when new records are added, when new recipients are onboarded, or when the regulatory landscape shifts, the original determination may no longer hold.
Continuous re-assessment is the practice of monitoring these changes and re-evaluating the determination when conditions warrant. It is standard practice in responsible data governance, and Integral automates the workflow.
How continuous re-assessment works
Establish the baseline
The initial Expert Determination defines the scope, the risk assessment, and the conditions under which the determination holds.
Monitor for change
Integral monitors the dataset for schema changes, record additions, new downstream uses, and recipient changes that could affect the determination.
Trigger re-assessment
When monitored conditions change beyond defined thresholds, re-assessment is triggered. The platform re-evaluates risk under the updated scope.
Update determination and documentation
A refreshed determination is issued with updated methodology provenance. Documentation reflects the current state of the data and its uses.
Why it matters
Posture stays current
The determination reflects the data as it exists today, not when it was last assessed. Buyers, partners, and regulators see current documentation.
Lineage and audit trail
Every re-assessment is logged with full provenance. The audit trail shows when assessments occurred, what changed, and what the current determination states.
Automated re-remediation
When re-assessment identifies new risk, the platform can apply targeted remediation automatically. The result is assessed, documented, and determined.
What teams say
“We wanted a solution that would allow us to massage the data sets we were already using and augment them over time - without requiring a from-scratch re-analysis of the overarching data set. Today, all our data sources go through Integral before they ever hit an environment we access.”
Frequently asked questions
How often does re-assessment occur?
Re-assessment is triggered by change, not by calendar. When the dataset, recipients, or regulatory context change beyond defined thresholds, the platform re-evaluates. You can also schedule periodic re-assessments.
What triggers a re-assessment?
Schema changes, new records or record deletions, new downstream recipients, changes in intended use, and shifts in regulatory requirements can all trigger re-assessment.
Does re-assessment require the same effort as the initial determination?
No. Re-assessment builds on the baseline determination. Only the changed conditions are evaluated. The platform automates the comparison and produces an updated determination.
What happens to the previous determination?
Previous determinations are archived in the audit trail. The lineage shows the full history of assessments, changes, and re-determinations for each dataset.
