Security is the larger environment and set of rules that operate to assure confidentiality, which in turn protects the individual's right to privacy. Organizations collecting and distributing data need to assure a proper measure of protection for individual privacy while satisfying the organizational and societal needs for efficient use of the data. However, existing statutory, regulatory, and administrative provisions governing confidentiality, privacy, and security mostly predate the emergence of GIS technology and systems. Organizations contributing to, or participating in, GIS cooperative activities need to reassess the relevance and adequacy of their existing controls over, and protection for, data in light of the increased vulnerability attaching to GIS use of the data. Data about individuals can be personally identifiable or it can be anonymous.
Identifiable information allow others to easily recognize a specific person.
Anonymous information makes the discovery of the individual's identity difficult if not impossible. Identifying information is by its nature linkable, over time and across data series. Often the data source is completely external to the organization providing the GIS services. Resolution of privacy concerns or disputes will most likely have to occur at the original source of data collection, putting a greater emphasis on the need for those organizations to address these issues at the time of data collection. The disaggregation of data and information to a low level of geographic units increases the risk that private information will not, or cannot, be kept confidential.