Unify - Identity Data Obfuscation

Obfuscation provides the ability to conceal identity data within Unify based on specific attributes or a combination of attributes from your source integrations. This enhances privacy and control over identity visibility while maintaining the essential functionality of Workflows and other automation.

Key Benefits

• Allows obfuscation of identities based on any chosen attribute or attribute combination
• Ensures that obfuscated identities are not directly identifiable within Unify
• Maintains Unify functionality, allowing obfuscated identities to be included in Workflows and Action Plans without revealing their details
• Protects identity data within Unify but does not enforce obfuscation once data is transmitted to external systems
• Supports compliance with General Data Protection Regulation (GDPR) requirements, specifically Article 5 (data minimization and accuracy) and Article 32 (security of processing) by reducing exposure of personal data within Unify

How it Works

• Request identity obfuscation for all identities or for specific Segments by submitting a Support Request with the requested Segments.
• Identifying details of obfuscated identities are obfuscated within Unify’s analytics, reporting, and workflow execution history.
• Any identifying information sent outside of Unify (e.g., to a Training Platform) is not controlled by Unify and is the responsibility of the receiving system to manage obfuscation.
• Obfuscated identities still have a Human Risk Index, Behavior Score, and insights associated with the identity. Obfuscated identities can still be used when taking an action, such as within a Workflow.

FAQs

Q: What information is obfuscated when using the Identity Obfuscation feature?
A: All identifiable attributes and identity-related information are obfuscated within Unify in compliance with GDPR principles of data minimization and privacy by design.

Q: Are obfuscated identities included in Unify actions, such as workflows?
A: Yes, obfuscated identities can be included in and affected by workflows. Identifying information about obfuscated identities is concealed within workflow execution history. Scorecards are not sent to obfuscated identities by default.

Q: Are there cases where identifying information about an obfuscated identity can be revealed?
A: Yes, in downstream systems. Obfuscation applies only within Unify. If information is sent to external systems (e.g., Training platforms, outbound API integrations), it becomes the responsibility of those systems to maintain identity protection.

Example: If an obfuscated identity is assigned Training, the Training platform may reveal their assignment.

Q: What can I use to determine which users to obfuscate identity information in Unify?
A: Obfuscation can be applied to all identities or to a Segment of identities based on identity attributes from source integrations. Attributes may include locations, email addresses, job titles, departments, or other relevant data.

Q: How do I request the enabling of Identity Obfuscation?
A: Submit a Support Request with the requested Segments for obfuscation. If you need a new Segment created, complete and attach the Segment and Impact Modifier request form with your submission