References

Abayomi, K., Gelman, A., and Levy, M. (2008). Diagnostics for multivariate imputations. Applied Statistics, 57(3), 273–291.

Abowd, J.M. (2016). Why Statistical Agencies Need to Take Privacy-Loss Budgets Seriously, and What It Means When They Do. Available: http://digitalcommons.ilr.cornell.edu/ldi/32 [May 2017].

Abowd, J.M., and Schmutte, I. (2017). Revisiting the Economics of Privacy: Population Statistics and Confidentiality Protection as Public Goods. Available: https://www2.census.gov/ces/wp/2017/CES-WP-17-37.pdf [August 2017].

Abowd, J.M., and Stinson, M.H. (2013). Estimating measurement error in annual job earnings: A comparison of survey and administrative data. The Review of Economics and Statistics, 95(5), 1451–1467. Available: http://www.mitpressjournals.org/doi/pdf/10.1162/REST_a_00352 [July 2017].

Abowd, J.M., Alvisi, L., Dwork, C., Kannan, S., Machanavajjhala, A., and Reiter, J. (2017). Privacy-Preserving Data Analysis for the Federal Statistical Agencies. Available: https://arxiv.org/ftp/arxiv/papers/1701/1701.00752.pdf [July 2017].

Administrative Data Research Network. (2017). Security Standards. Available: https://adrn.ac.uk/provide-data/standards-governance/security-standards/ [August 2017].

Akavia, A., Goldwasser, S., and Vaikuntanathan, V. (2009). Simultaneous Hardcore Bits and Cryptography against Memory Attacks. Available: https://people.csail.mit.edu/vinodv/AGV-proc.pdf [May 2017].

Altman, M., Wood, A., O’Brien, D.R., Vadhan, S., and Gasser, U. (2015). Toward a modern approach to privacy-aware government data releases. Berkeley Technology Law Journal, 30(3), 1967–2072.

Apple, Inc. (2016). Apple Worldwide Developer’s Conference (WWDC16), Keynote Address by Craig Federighi. Available: https://www.apple.com/apple-events/june-2016 [June 2017].

Baldwin, E., Johnson, K., Berthoud, H., and Dublin, S. (2015). Linking mothers and infants within electronic health records: A comparison of deterministic and probabilistic algorithms. Pharmacoepidemiology and Drug Safety, 24(1), 45–51.

Barocas, S., and Nissenbaum, H. (2014). Big data’s end run around anonymity and consent. In J. Lane, V. Stodden, S. Bender, and H. Nissenbaum (Eds.), Privacy, Big Data, and the Public Good: Frameworks for Engagement (pp. 44–75). New York: Cambridge University Press.

Belin, T.R., and Rubin, D.B. (1995). A method for calibrating false-match rates in record linkage. Journal of the American Statistical Association, 90(430), 694–707.

Bellow, M. (2007). Improved County-Level Estimation of Crop Yield Using Model-Based Methodology with a Spatial Component. Available: https://ww2.amstat.org/meetings/ices/2007/proceedings/ICES2007-000110.PDF [September 2017].

Benedetto, G., Stinson, M.H., and Abowd, J.M. (2013). The Creation and Use of the SIPP Synthetic Beta. Available: https://www.census.gov/content/dam/Census/programs-surveys/sipp/methodology/SSBdescribe_nontechnical.pdf [July 2017].

Bianchi, R.F. (2011). The Challenges of Consolidating Federal Government Information Systems and the Genesis of Scope. Available: https://www.unece.org/fileadmin/DAM/stats/documents/ece/ces/ge.50/2011/wp.12.e.pdf [June 2017].

Biderman, A.D., and Lynch, J.P. (1991). Understanding Crime Incidence Statistics: Why the UCR Diverges from the NCS. New York: Springer-Verlag.

Biemer, P. (2016). Errors and inference. In I. Foster, R. Ghani, R.S. Jarmin, F. Kreuter, and J. Lane (Eds.), Big Data and Social Science: A Practical Guide to Methods and Tools (pp. 265–298). Boca Raton, FL: CRC Press.

Bondarenko, I., and Raghunathan, T. (2016). Graphical and numerical diagnostic tools to assess suitability of multiple imputations and imputation models. Statistics in Medicine, 35(17), 3007–3020.

Boneh, D., Sahai, A., and Waters, B. (2010). Functional Encryption: Definitions and Challenges. Available: https://eprint.iacr.org/2010/543.pdf [April 2017].

Borowik, J., Henden, M., and Fraser, B. (2012). Riding the Big Data Wave to Streamline Acquiring and Managing Data. Available: https://www.unece.org/fileadmin/DAM/stats/documents/ece/ces/ge.50/2012/15_Australia.pdf [August 2017].

Box, G.E.P. (1979). Robustness in the Strategy of Scientific Model Building. Available: http://oai.dtic.mil/oai/oai?verb=getRecord&metadataPrefix=html&identifier=ADA070213 [July 2017].

Brackstone, G. (1987). Statistical Issues of Administrative Data: Issues and Challenges. Presented at Statistical Uses of Administrative Data—An International Symposium, Statistics Canada, November 23–25.

Brickell, J., and Shmatikov, V. (2008). The Cost of Privacy: Destruction of Data-Mining Utility in Anonymized Data Publishing. Available: https://www.cs.cornell.edu/~shmat/shmat_kdd08.pdf [May 2017].

Brummet, Q., Masterton, M., and Smith, D. (2014). Evaluation of Commercial School and Teacher Lists to Enhance Survey Frames. CARRA Working Paper 2014-07. Washington, DC: U.S. Census Bureau. Available: https://www.census.gov/content/dam/Census/library/working-papers/2014/adrm/carra-wp-2014-07.pdf [August 2017].

Bucholtz, S. (2015). Matching the American Housing Survey to Tax Assessment Data: Some Preliminary Results. Available: http://sites.nationalacademies.org/cs/groups/dbassesite/documents/webpage/dbasse_171490.pdf [February 2017].

Bureau of Justice Statistics. (2014). National Crime Victimization Survey: Technical Documentation. NCJ-247252. Available: https://www.bjs.gov/content/pub/pdf/ncvstd13.pdf [May 2017].

Bureau of Justice Statistics. (2016). NCVS Design: Subnational. Available: www.bjs.gov/index.cfm?ty=tp&tid=911 [May 2017].

Bureau of Labor Statistics. (2012). Geographic Profile of Employment and Unemployment. Available: www.bjs.gov/index.cfm?ty=tp&tid=911 [May 2017].

Bureau of Labor Statistics. (2015). Geographic Profile of Employment and Unemployment, 2014. Available: www.bls.gov/opub/gp/laugp.htm [May 2017].

Bureau of Labor Statistics. (2017a). Handbook of Methods. Available: https://www.bls.gov/opub/hom [May 2017].

Bureau of Labor Statistics. (2017b). The Employment Situation—December 2016. News Release. Available: https://www.bls.gov/news.release/archives/empsit_01062017.pdf [May 2017].

Calandrino, J.A., Kilzer, A., Narayanan, A., Felten, E., and Shmatikov, V. (2011). “You might also like:” Privacy risks of collaborative filtering. In Proceedings of the 2011 IEEE Symposium on Security and Privacy (pp. 231–246). Washington, DC: IEEE Computer Society. doi:10.1109/SP.2011.40.

Cameron, D., Pope, S., and Clemence, M. (2014). Dialogue on Data. Available: http://www.esrc.ac.uk/files/public-engagement/public-dialogues/dialogue-on-data-exploring-thepublic-s-views-on-using-linked-administrative-data-for-research-purposes [May 2017].

Canetti, R., Raghuraman, S., Richelson, S., and Vaikuntanathan, V. (2017). Chosen-ciphertext secure fully homomorphic encryption. In Public-Key Cryptography—PKC 2017 (pp. 213–240). Berlin/Heidelberg, Germany: Springer.

Card, D., Chetty, R., Feldstein, M., and Saez, E. (2010). Expanding Access to Administrative Data for Research in the United States. Arlington, VA: National Science Foundation. Available: https://www.nsf.gov/sbe/sbe_2020/submission_detail.cfm?upld_id=112 [December 2017].

Carson, E.A. (2015). Linking Administrative BJS Data: Better Understanding of Prisoners’ Personal Histories by Linking the National Corrections Reporting Program (NCRP) and CARRA Data. Available: https://s3.amazonaws.com/sitesusa/wp-content/uploads/sites/242/2016/03/A1_Carson_2015FCSM.pdf [August 2017].

Cavallo, A., and Rigobon, R. (2016). The Billion Prices Project: Using Online Prices for Measurement and Research. NBER Working Paper Series, Working Paper 22111. Cambridge, MA: National Bureau of Economic Research. Available: http://www.nber.org/papers/w22111 [November 2016].

Centers for Disease Control and Prevention. (2016). Behavioral Risk Factor Surveillance System. Weighting BRFSS Data: BRFSS 2015. Available: https://www.cdc.gov/brfss/annual_data/2015/pdf/weighting_the-data_webpage_content.pdf [February 2017].

Chatterjee, N., Chen, Y.H., Maas, P., and Carroll, R.J. (2016). Constrained maximum likelihood estimation for model calibration using summary-level information from external big data sources. Journal of the American Statistical Association, 111(513), 107–117.

Christen, P. (2012). Data Matching: Concepts and Techniques for Record Linkage, Entity Resolution, and Duplicate Detection. New York: Springer.

Citro, C. (2014). From multiple modes for surveys to multiple data sources for estimates. Survey Methodology, 40(2), 137–161.

Cohen, J.W., Cohen, S.B., and Banthin, J.S. (2009). The Medical Expenditure Panel Survey: A national information resource to support healthcare cost research and inform policy and practice. Medical Care, 47(7), S44–S50.

Cohen, S.B., and Cohen, J.W. (2013). The capacity of the Medical Expenditure Panel Survey to inform the Affordable Care Act. Inquiry, 50(2), 124–134.

Conk, M.A. (1980). The United States Census and Labor Force Change: A History of Occupation Statistics, 1870–1940. Ann Arbor: University of Michigan Research Press.

Contreras, J.L., and Reichman, J.H. (2015). Sharing by design: Data and decentralized commons. Science, 350(6266), 1312–1314.

Cruze, N.B. (2015). Integrating survey data with auxiliary sources of information to estimate crop yields. In Proceedings of the Survey Research Methods Section (pp. 565–578). Washington, DC: American Statistical Association.

Cynamon, M., and Blumberg, S. (2016). National Health Interview Survey Questionnaire Redesign. Available: http://www.copafs.org/UserFiles/file/NHISRedesignforCOPAFSrev.pdf [February 2017].

Davies, C. (2009). Area Frame Design for Agricultural Surveys. Available: https://www.nass.usda.gov/Publications/Methodology_and_Data_Quality/Advanced_Topics/AREA%20FRAME%20DESIGN.pdf [February 2017].

DeFrances, C., Anand, K., Williams, S., and Woodwell, D. (2012). Designing the National Hospital Care Survey. Available: http://www.amstat.org/meetings/ices/2012/papers/302080.pdf [April 2017].

Diffie, W., and Hellman, M.E. (1976). New directions in cryptography. IEEE Transactions on Information Theory, 22(6), 644–654.

Dillman, D. (1996). Why innovation is difficult in government surveys. Journal of Official Statistics, 12(2), 113–124.

Dinur, I., and Nissim, K. (2003). Revealing Information while Preserving Privacy. Available: http://www.cse.psu.edu/~ads22/privacy598/papers/dn03.pdf [November 2016].

Dwork, C. (2006). Differential privacy. In Proceedings of the 33rd International Conference on Automata, Languages and Programming, Part II (ICALP) (pp. 1–12). Berlin/Heidelberg, Germany: Springer-Verlag. doi:10.1007/11787006_1. Available: http://research.microsoft.com/pubs/64346/dwork.pdf [November 2016].

Dwork, C., and Mulligan, D. (2014). Differential Privacy in Practice: Expose Your Epsilons! Paper presented at Privacy Law Scholars Conference (PLSC 2014). Cambridge, MA: Harvard University.

Dwork, C., McSherry, F., Nissim, K., and Smith, A. (2006). Calibrating noise to sensitivity in private data analysis. In TCC‘06 Proceedings of the Third Conference on Theory of Cryptography (pp. 265–284). Berlin/Heidelberg, Germany: Springer-Verlag. doi:10.1007/11681878_14.

Dwork, C., McSherry, F., and Talwar, K. (2007). The price of privacy and the limits of LP decoding. In Proceedings of the 39th ACM Symposium on Theory of Computing (pp. 85–94). New York: ACM. Available: http://dl.acm.org/citation.cfm?id=1250804 [November 2016].

Dwork, C., Smith, A., Steinke, T., Ullman, J., and Vadhan, S. (2015). Robust traceability from trace amounts. In IEEE 56th Annual Symposium Foundations of Computer Science (FOCS) (pp. 650–669). Berkeley, CA: IEEE. Available: http://privacytools.seas.harvard.edu/files/privacytools/files/robust.pdf?m=1445278897 [August 2017]. doi:10.1109/FOCS.2015.46.

Dwork, C., Smith, A., Steinke, T., and Ullman, J. (2017). Exposed! A survey of attacks on private data. Annual Review of Statistics and Its Application, 4(1), 61–84.

Elliott, M.R., and Valliant, R. (2017). Inference for nonprobability samples. Statistical Science, 32(2), 249–264.

Eltinge, J.L., Biemer, P.P., and Holmberg, A. (2013). A potential framework for integration of architecture and methodology to improve statistical production systems. Journal of Official Statistics, 29(1), 125–145.

Erlingsson, Ú., Pihur, V., and Korolova, A. (2014). RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security (pp. 1054–1067). New York: Association for Computing Machinery. doi:10.1145/2660267.2660348.

European Commission. (2011). European Statistics Code of Practice. Brussels, Belgium: European Statistical System Committee. Available: http://ec.europa.eu/eurostat/documents/3859598/5921861/KS-32-11-955-EN.PDF/5fa1ebc6-90bb-43fa-888f-dde032471e15 [August 2017].

European Statistical System Committee. (2013). Quality Assurance Framework. Available: http://ec.europa.eu/eurostat/documents/64157/4392716/ESS-QAF-V1-2final.pdf/bbf5970c-1adf-46c8-afc3-58ce177a0646 [June 2017].

Fantuzzo, J., and Culhane, D.P. (2015). Actionable Intelligence: Using Integrated Data Systems to Achieve a More Effective, Efficient, and Ethical Government. New York: Palgrave Macmillan.

Federal Committee on Statistical Methodology. (1978). An Error Profile: Employment as Measured by the Current Population Survey. Statistical Policy Working Paper 3. Available: https://s3.amazonaws.com/sitesusa/wp-content/uploads/sites/242/2014/04/spwp3.pdf [July 2017].

Federal Committee on Statistical Methodology. (2001). Measuring and Reporting Sources of Error in Surveys. Statistical Policy Working Paper 31. Available: https://s3.amazonaws.com/sitesusa/wp-content/uploads/sites/242/2014/04/spwp31.pdf [July 2017].

Federal Committee on Statistical Methodology. (2006). Report on Statistical Disclosure Limitations Methodology. Statistical Policy Working Paper 22. Available: https://fcsm.sites.usa.gov/files/2014/04/spwp22.pdf [November 2016].

Fellegi, I.P. (1972). On the question of statistical confidentiality. Journal of the American Statistical Association, 67(337), 7–18.

Fellegi, I.P. (1999). Keynote address: Record linkage and public policy—a dynamic evolution. In Record Linkage Techniques—1997: Proceedings of an International Workshop and Exposition (Chapter 1). Washington, DC: The National Academies Press. Available: https://www.nap.edu/read/6491/chapter/4 [February 2017].

Fellegi, I.P., and Sunter, A.B. (1969). A theory for record linkage. Journal of the American Statistical Association, 64(328), 1183–1210.

Fosdick, B.K., DeYoreo, M., and Reiter, J.P. (2016). Categorical data fusion using auxiliary information. Annals of Applied Statistics, 10(4), 1907–1929.

Froomkin, A.M. (2016). Privacy Issues with Sensor Data Collection. Available: http://sites.nationalacademies.org/cs/groups/dbassesite/documents/webpage/dbasse_173124.pdf [February 2017].

Fulton, J.A. (2012). Respondent Consent to Use Administrative Data. Available: http://drum.lib.umd.edu/handle/1903/13601 [February 2017].

Genkin, D., Shamir, A., and Tromer, E. (2014). RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis. Available: http://www.cs.tau.ac.il/~tromer/papers/acoustic-20131218.pdf [May 2017].

Gentry, C. (2009). A Fully Homomorphic Encryption Scheme. Available: https://crypto.stanford.edu/craig/craig-thesis.pdf [November 2016].

Golden, C., Driscoll, A.K., Simon, A.E., Judson, D.H., Miller, E.A., and Parker., J.D. (2015). Linkage of NCHS population health surveys to administrative records from Social Security Administration and Centers for Medicare & Medicaid Services. Vital and Health Statistics, 1(58), 1–53.

Goldreich, O. (2004). Foundations of Cryptography (Vol. 2). Cambridge, UK: Cambridge University Press.

Goldreich, O., Micali, S., and Wigderson, A. (1987). How to play any mental game. In STOC ‘87 Proceedings of the Nineteeth Annual ACM Symposium on Theory of Computing (pp. 218–229). New York: Association for Computing Machinery. doi: 10.1145/28395.28420.

Goldwasser, S., and Micali, S. (1982). Probabilistic encryption & how to play mental poker keeping secret all partial information. In STOC ‘82 Proceedings of the Fourteenth Annual ACM Symposium on Theory of Computing (pp. 365–377). New York: Association for Computing Machinery. doi:10.1145/800070.802212.

Goldwasser, S., and Rothblum, G. (2010). Securing computation against continuous leakage. In T. Rabin (Ed.), Advances in Cryptology—CRYPTO 2010 (pp. 59–79). Berlin/Heidelberg, Germany: Springer. doi:10.1007/978-3-642-14623-7_4.

Goldwasser, S., Micali, S., and Rivest, R.L. (1988). A digital signature scheme secure against adaptive chosen-message attacks. SIAM Journal on Computing, 17(2), 281–308.

Gorina, Y., Pratt, L.A., Kramarow, E.A., and Elgaddal, N. (2015). Hospitalization, Readmission, and Death Experience of Noninstitutionalized Medicare Fee-for-Service Beneficiaries Aged 65 and Over. Available: https://permanent.access.gpo.gov/gpo62706/nhsr084.pdf [February 2017].

Groen, J. (2012). Sources of error in survey and administrative data: The importance of reporting procedures. Journal of Official Statistics, 28(2), 173–198.

Groves, R.M., and Lyberg, L. (2010). Total survey error: Past, present, and future. Public Opinion Quarterly, 74(5), 849–879.

Groves, R.M., and Schoeffel, G. (in press). Use of administrative records in evidence-based policymaking. The ANNALS of the American Academy of Political and Social Science.

Groves, R.M., Fowler, F., Couper, M., Singer, E., and Tourangeau, R. (2009). Survey Methodology (2nd ed.). New York: Wiley.

Gueron, S., Lindell, Y., Nof, A., and Pinkas, B. (2015). Fast Garbling of Circuits under Standard Assumptions. Available: https://eprint.iacr.org/2015/751.pdf [May 2017].

Habermann, H. (2010). Future of innovation in the Federal Statistical System. The ANNALS of the American Academy of Political and Social Science, 631(1), 194–203.

Hall, P.H., and George, V. (2016). 2015 Salary Survey of Business, Industry, and Government Statisticians. Available: http://www.amstat.org/asa/files/pdfs/YCR-SPAIGsalarysurvey15.pdf [May 2017].

Haneuse, S., and Wakefield, J. (2007). Geographic-based ecological correlation studies using supplemental case-control data. Statistics in Medicine, 27(6), 864–887.

Harron, K., Wade, A., Gilbert, R., Muller-Pebody, B., and Goldstein, H. (2014). Evaluating bias due to data linkage error in electronic healthcare records. BMC Medical Research Methodology, 14(1), 36. doi:10.1186/1471-2288-14-36.

Harron, K., Goldstein, H., and Dibben, C. (2015). Methodological Developments in Data Linkage. Hoboken, NJ: John Wiley & Sons.

Hedrick, S., and Weister, T. (2016). 2015 American Community Survey (ACS) 1-Year Estimates. Available: https://www.census.gov/content/dam/Census/newsroom/press-kits/2016/20160908_acs_1year_webinar.pdf [May 2017].

Herzog, T.N., Scheuren, F.J., and Winkler, W.E. (2007). Data Quality and Record Linkage Techniques. New York: Springer Science+Business Media.

Hof, M.H.P., and Zwinderman, A.H. (2012). Methods for analyzing data from probabilistic linkage strategies based on partially identifying variables. Statistics in Medicine, 31(30), 4231–4242.

Holt, T. (2007). The official statistics Olympic challenge: Wider, deeper, quicker, better, cheaper (with discussions). The American Statistician, 61(1), 1–8. doi:10.1198/000313007X168173.

Homer, N., Szelinger, S., Redman, M., Duggan, D., Tembe, W., Muehling, J., Pearson, J., Stephan, D., Nelson, S., and Craig, D. (2008). Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLOS Genetics. Available: http://journals.plos.org/plosgenetics/article?id=10.1371/journal.pgen.1000167 [November 2016].

Horrigan, M. (2013a). Big Data: A Perspective from the BLS. Available: http://magazine.amstat.org/blog/2013/01/01/sci-policy-jan2013 [July 2017].

Horrigan, M. (2013b). Big Data and Official Statistics: International Year of Statistics November 13, 2013. Washington, DC: Bureau of Labor Statistics. Available: https://www.bls.gov/osmr/symp2013_horrigan.pdf [July 2017].

Hsieh, Y.P., and Murphy, J. (2017). Total Twitter error. In P.P. Biemer, E. de Leeuw, S. Eckman, B. Edwards, F. Kreuter, L.E. Lyberg, N.C. Tucker, and B.T. West (Eds.), Total Survey Error in Practice (pp. 23–46). Hoboken, NJ: Wiley.

Hu, S.S., Balluz, L., Battaglia, M.P., and Frankel, M.R. (2011). Improving public health surveillance using a dual-frame survey of landline and cell phone numbers. American Journal of Epidemiology, 173(6), 703–711.

Hundepool, A., Domingo-Ferrer, J., Franconi, L., Giessing, S., Nordholt, E.S., Spicer, K., and de Wolf, P.P. (2012). Statistical Disclosure Control. Chichester, UK: John Wiley & Sons.

Iwig, W., Berning, M., Marck, P., and Prell, M. (2013). Data Quality Assessment Tool for Administrative Data. Available: http://www.bls.gov/osmr/datatool.pdf [August 2017].

Japec, L., Kreuter, F., Berg, M., Biemer, P., Decker, P., Lampe, C., Lane, J., O’Neil, C., and Usher, A. (2015). AAPOR Task Force Report on Big Data. Oakpark Terrace, IL: American Association for Public Opinion Research. Available: http://www.aapor.org/Education-Resources/Reports/Big-Data.aspx [August 2017].

Jones, M.R. (2016). Measuring the Effects of the Tipped Minimum Wage Using W-2 Data. CARRA Working Paper 2016-03. Washington, DC: U.S. Census Bureau. Available: https://www.census.gov/content/dam/Census/library/working-papers/2016/adrm/carra-wp-2016-03.pdf [February 2017].

Judson, D.H., Parker, J.D., and Larsen, M.D. (2013). Adjusting Sample Weights for Linkage-Eligibility Using SUDAAN. Hyattsville, MD: National Center for Health Statistics. Available: http://www.cdc.gov/nchs/data/datalinkage/adjusting_sample_weights_for_linkage_eligibility_using_sudaan.pdf [July 2017].

Karr, A.F., and Reiter, J. (2014). Using statistics to protect privacy. In J. Lane, V. Stodden, S. Bender, and H. Nissenbaum (Eds.), Privacy, Big Data, and the Public Good: Frameworks for Engagement (pp. 276–295). New York: Cambridge University Press.

Kasiviswanathan, S.P., Rudelson, M., and Smith, A. (2013). The Power of Linear Reconstruction Attacks. Proceedings of the 45th Annual ACM Symposium on the Theory of Computing, Palo Alto, CA, June 2–4. Available: https://arxiv.org/pdf/1210.2381v1.pdf [November 2016].

Kim, J.K., and Shao, J. (2013). Statistical Methods for Handling Incomplete Data. Boca Raton, FL: CRC Press.

Kinney, S.K., Reiter, J.P., Reznek, A.P., Miranda, J., Jarmin, R.S., and Abowd, J.M. (2011). Towards Unrestricted Public Use Business Microdata: The Synthetic Longitudinal Business Database. Available: https://www.census.gov/ces/pdf/CES-WP-11-04.pdf [August 2017].

Kleppmann, M. (2017). Designing Data-Intensive Applications: The Big Ideas Behind Reliable, Scalable, and Maintainable Systems. Sebastopol, CA: O’Reilly Media.

Kocher, P.C. (1996). Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems. Available: http://www.cse.msstate.edu/~ramkumar/TimingAttacks.pdf [May 2017].

Kocher, P., Jaffe, J., and Jun, B. (1998). Differential Power Analysis. Available: http://www.cse.msstate.edu/~ramkumar/DPA.pdf [May 2017].

Kosar, K.R. (2011). The Quasi Government: Hybrid Organizations with Both Government and Private Sector Legal Characteristics. Available: https://fas.org/sgp/crs/misc/RL30533.pdf [July 2017].

Kraus, R. (2013). Statistical déjà vu: The National Data Center proposal of 1965 and its descendants. Journal of Privacy and Confidentiality, 5(1), 1–37.

Kreuter, F., Sakshaug, J.W., and Tourangeau, R. (2016). The framing of the record linkage consent question. International Journal of Public Opinion Research, 28(1), 142–152.

Lahiri, P., and Larsen, M.D. (2005). Regression analysis with linked data. Journal of the American Statistical Association, 100(469), 222–230.

Langton, L., and Fay, R.E. (2016). Developmental Efforts of Subnational Crime Rates Based on the National Crime Victimization Survey. Available: http://www.jrsa.org/webinars/presentations/ncvs-subnational-est.pdf [February 2017].

Langton, L., Planty, M., and Lynch, J.P. (2017). The second major redesign of the National Crime Victimization Survey. Criminology & Public Policy, 16(4), 1049–1074.

Lariscy, J.T. (2011). Differential record linkage by Hispanic ethnicity and age in linked mortality studies: Implications for the epidemiologic paradox. Journal of Aging and Health, 23(8), 1263–1284.

Laudon, K.C., and Laudon, J.P. (2017). Management Information Systems: Managing the Digital Firm (15th ed.). London, UK: Pearson.

Levant, S., Chari, K., and DeFrances, C. (2016). National Hospital Care Survey Demonstration Projects: Traumatic Brain Injury. National Health Statistics Reports, No. 97. Available: http://www.cdc.gov/nchs/data/nhsr/nhsr097.pdf [August 2016].

Li, J., Diallo, M.A., and Fay, R.E. (2017). Rethinking the NCVS: Small Area Estimation Approaches to Estimating Crime. Available: https://www.researchgate.net/publication/266463975_Rethinking_the_NCVS_Small_Area_Estimation_Approaches_to_Estimating_Crime [August 2017].

Li, N., Li, T., and Venkatasubramanian, S. (2007). T-closeness: Privacy beyond k-anonymity and l-diversity. In 2007 IEEE 23rd International Conference on Data Engineering (pp. 106–115). doi:10.1109/ICDE.2007.367856. Available: http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=4221659 [April 2017].

Lohr, S. (2011). Alternative survey sample designs: Sampling with multiple overlapping frames. Survey Methodology, 37(2), 197–213.

Lohr, S., and Raghunathan, T. (2017). Combining survey data with other sources. Statistical Science, 32(2), 293–312.

Lynch, J.P., and Addington, L.A. (2007). Understanding Crime Statistics: Revisiting the Divergence of the UCR and NCVS. New York: Cambridge University Press.

Machanavajjhala, A., Gehrke, J., and Kifer, D. (2006). Diversity: Privacy Beyond k-Anonymity. Available: http://www.cs.uml.edu/~ge/pdf/papers_685-2-2/ldiversity-icde06.pdf [April 2017].

Machanavajjhala, A., Kifer, D., Abowd, J., Gehrke, J., and Vilhuber, L. (2008). Privacy: Theory Meets Practice on the Map. Available: http://www.cse.psu.edu/~duk17/papers/PrivacyOnTheMap.pdf [July 2008].

Manyika, J., Chui, M., Brown, B., Bughin, J., Dobbs, R., Roxburgh, C., and Byers, A.H. (2011). Big Data: The Next Frontier for Innovation, Competition, and Productivity. McKinsey & Company, Digital McKinsey, May. Available: http://www.mckinsey.com/business-functions/digital-mckinsey/our-insights/big-data-the-next-frontier-for-innovation [December 2017].

Martin, J. (1981). Design and Strategy for Distributed Data Processing. Englewood Cliffs, NJ: Prentice-Hall.

McClure, D., and Reiter, J.P. (2012). Differential privacy and statistical disclosure risk measures: An investigation with binary synthetic data. Transactions on Data Privacy, 5(3), 535–552.

Miller, E.A., Decker, S.L., and Parker, J.D. (2016). Characteristics of Medicare advantage and fee-for-service beneficiaries upon enrollment in Medicare at age 65. The Journal of Ambulatory Care Management, 39(3), 231–241.

Miller, E.A., McCarty, F.A., and Parker, J.D. (2017). Racial and ethnic differences in a linkage with the National Death Index. Ethnicity & Disease, 27(2), 77–84.

Miller, R. (2014). Big Data Curation. Available: http://comad.in/comad2014/Proceedings/Keynote2.pdf [June 2017].

Moriarity, C., and Scheuren, F. (2001). Statistical matching: A paradigm for assessing the uncertainty in the procedure. Journal of Official Statistics, 17(3), 407–422.

Muthukrishnan, S., and Nikolov, A. (2012). Optimal private halfspace counting via discrepancy. In Proceedings of the Forty-Fourth Annual ACM Symposium on Theory of Computing (pp. 1285–1292). New York: ACM. Available: http://dl.acm.org/citation.cfm?id=2214090&dl=ACM&coll=DL&CFID=698830182&CFTOKEN=71109411 [November 2016].

Narayanan, A., and Shmatikov, V. (2008). Robust de-anonymization of large sparse datasets (how to break anonymity of the Netflix prize dataset). In Proceedings of the 2008 IEEE Symposium on Security and Privacy (pp. 111–125). Washington, DC: IEEE Computer Society. doi:10.1109/SP.2008.33. Available: https://www.cs.cornell.edu/~shmat/shmat_oak08netflix.pdf [November 2016].

National Academies of Sciences, Engineering, and Medicine. (2016a). Modernizing Crime Statistics: Report 1: Defining and Classifying Crime. Committee on National Statistics. J. Lauritsen and D. Cork (Eds.). Panel on Modernizing the Nation’s Crime Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.

National Academies of Sciences, Engineering, and Medicine. (2016b). Statistical Challenges in Assessing and Fostering the Reproducibility of Scientific Results: Summary of a Workshop. M. Schwalbe (Rapporteur). Committee on Applied and Theoretical Statistics. Division on Engineering and Physical Sciences. Washington, DC: The National Academies Press.

National Academies of Sciences, Engineering, and Medicine. (2017a). Improving Crop Estimates by Integrating Multiple Data Sources. Panel on Methods for Integrating Multiple Data Sources to Improve Crop Estimates, M.E. Bock and N. Kirkendall (Eds.). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.

National Academies of Sciences, Engineering, and Medicine. (2017b). Innovations in Federal Statistics: Combining Data Sources While Protecting Privacy. Panel on Using Multiple Data Sources and State-of-the-Art Estimation Methods in Federal Statistics: Frameworks, Methods, and Assessment, R.M. Groves and B.A. Harris-Kojetin (Eds.). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.

National Academies of Sciences, Engineering, and Medicine. (2017c). Principles and Practices for a Federal Statistical Agency: Sixth Edition. Committee on National Statistics. C. Citro (Ed.). Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.

National Center for Education Statistics. (1994). Quality Profile for SASS: Aspects of the Quality of Data in the Schools and Staffing Surveys (SASS). Available: https://nces.ed.gov/pubs94/94340.pdf [August 2017].

National Center for Health Statistics. (2012). Linkages between Survey Data from the National Center for Health Statistics and Medicare Program Data from the Centers for Medicare & Medicaid Services. Available: http://www.cdc.gov/nchs/data/datalinkage/cms_medicare_methods_report_final.pdf [February 2017].

National Center for Science and Engineering Statistics. (2015). Doctorate Recipients from U.S. Universities: 2013. Available: https://www.nsf.gov/statistics/sed/2013/digest/nsf15304a.pdf [May 2017].

National Research Council. (1984). Cognitive Aspects of Survey Methodology: Building a Bridge between Disciplines. Committee on National Statistics. T.B. Jabine, M.L. Straf, J.M. Tanur, and R. Tourangeau (Eds.). Division of Behavioral and Social Sciences and Education. Washington, DC: National Academy Press. doi:10.17226/930.

National Research Council. (2005). Expanding Access to Research Data: Reconciling Risks and Opportunities. Panel on Data Access for Research Purposes, Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press. doi:10.17226/11434.

National Research Council. (2007). Understanding Business Dynamics: An Integrated Data System for America’s Future. Panel on Measuring Business Formation, Dynamics, and Performance, J. Haltiwanger, L.M. Lynch, and C. Mackie (Eds.). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press. doi:10.17226/11844.

National Research Council. (2011). Facilitating Innovation in the Federal Statistical System: Summary of a Workshop. H. Habermann (rapporteur). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press. doi:10.17226/13168.

National Research Council. (2013a). Measuring What We Spend: Toward a New Consumer Expenditure Survey. Panel on Redesigning the BLS Consumer Expenditure Surveys, D.A. Dillman and C.C. House (Eds.). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press. doi:10.17226/13520.

National Research Council. (2013b). Nonresponse in Social Science Surveys: A Research Agenda. Panel on a Research Agenda for the Future of Social Science Data Collection, R. Tourangeau and T.J. Plewes (Eds.). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press.

National Research Council. (2014a). Capturing Change in Science, Technology, and Innovation: Improving Indicators to Inform Policy. Panel on Developing Science, Technology, and Innovation Indicators for the Future, R.E. Litan, A.W. Wyckoff, and K.H. Fealing (Eds.). Committee on National Statistics, Division of Behavioral and Social Science and Education. Board on Science, Technology, and Economic Policy, Division of Policy and Global Affairs. Washington, DC: The National Academies Press. doi:10.17226/18606.

National Research Council. (2014b). Civic Engagement and Social Cohesion: Measuring Dimensions of Social Capital to Inform Policy. Panel on Measuring Social and Civic Engagement and Social Cohesion in Surveys, K. Prewitt, C.D. Mackie, and H. Habermann (Eds.). Committee on National Statistics, Division of Behavioral and Social Sciences and Education. Washington, DC: The National Academies Press. doi:10.17226/18831.

Nealon, J., and Gleaton, E. (2013). Consolidation and standardization of survey operations at a decentralized federal statistical agency. Journal of Official Statistics, 29(1), 5–28. doi:10.2478/jos-2013-0002. Available: https://www.degruyter.com/downloadpdf/j/jos.2013.29.issue-1/jos-2013-0002/jos-2013-0002.pdf [June 2017].

Newcombe, H.B., Kennedy, J.M., Axford, S.J., and James, A.P. (1959). Automatic linkage of vital records. Science, 130(3381), 954–959.

Nissim, K., Bembenek, A., Wood, A., Bun, M., Gaboardi, M., Gasser, U., O’Brien, D.R., Steinke, T., and Vadhan, S. (2016). Bridging the Gap between Computer Science and Legal Approaches to Privacy. Available: https://privacytools.seas.harvard.edu/files/privacytools/files/bridging_cs_law_privacy.pdf [July 2017].

Oberski, D.L., Kirchner, A., Eckman, S., and Kreuter, F. (2017). Evaluating the quality of survey and administrative data with generalized multitrait-multimethod models. Journal of the American Statistical Association. doi:10.1080/01621459.2017.1302338.

OECD. (2016). Research Ethics and New Forms of Data for Social and Economic Research. OECD Science, Technology and Industry Policy Papers, No. 34. Paris: OECD. doi:10.1787/5jln7vnpxs32-en. Available: http://www.oecd-ilibrary.org/docserver/download/5jln7vnpxs32-en.pdf?expires=1503241383&id=id&accname=guest&checksum=9C34738238F81374246539588B536F12 [August 2017].

O’Hara, A. (2016). Preliminary Research for Replacing or Supplementing the Income Question on the American Community Survey with Administrative Records. Available: https://www.census.gov/content/dam/Census/library/working-papers/2016/acs/2016_Ohara_01.pdf [August 2017].

Özsu, M.T., and Valduriez, P. (2011). Principles of Distributed Database Systems (3rd Edition). New York: Springer Science+Business Media, LLC. doi:10.1007/978-1-4419-8834-8.

Parsons, V.L., Moriarty, C., Jonas, K., Moore, T.F., Davis, K.E., and Tompkins, L. (2015). Design and Estimation for the National Health Interview Survey, 2006–2015. Hyattsville, MD: U.S. Department of Health and Human Services. Available: https://www.cdc.gov/nchs/data/series/sr_02/sr02_165.pdf [May 2017].

Permutt, T. (2016). Sensitivity analysis for missing data in regulatory submissions. Statistics in Medicine, 35(17), 2876–2879. doi:10.1002/sim.6753.

Planty, M., and Langton, L. (2014). National Crime Victimization Survey Subnational Program—An update. JRSA Forum, 32, 1–3.

President’s Council of Advisors on Science and Technology. (2014). Big Data and Privacy: A Technological Perspective. Available: https://bigdatawg.nist.gov/pdf/pcast_big_data_and_privacy_-_may_2014.pdf [August 2017].

Raghunathan, T.E. (2015). Missing Data Analysis in Practice. Boca Raton, FL: CRC Press.

Raghunathan, T.E., Diehr, P.K., and Cheadle, A.D. (2003). Combining aggregate and individual level data to estimate an individual level correlation coefficient. Journal of Educational and Behavioral Statistics, 28(1), 1–19.

Ramaprasan, A. (2015). Record linkage with Washington State Cancer Registry. Journal of Patient-Centered Research and Reviews, 2(2), 117–118. doi:10.17294/2330-0698.1144.

Reiter, J.P. (2012). Statistical approaches to protecting confidentiality for microdata and their effects on the quality of statistical inferences. Public Opinion Quarterly, 76(1), 163–181.

Reiter, J.P., and Raghunathan, T.E. (2007). The Multiple Adaptations of Multiple Imputation. Available: http://www2.stat.duke.edu/~jerry/Papers/jasa07.pdf [June 2017].

Ristenpart, T., Tromer, E., Shacham, H., and Savage, S. (2009). Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds. Available: https://cseweb.ucsd.edu/~hovav/dist/cloudsec.pdf [April 2017].

Rivest, R.L., Shamir, A., and Adleman, L. (1978). A Method for Obtaining Digital Signatures and Public-Key Cryptosystems. Available: https://web.williams.edu/Mathematics/lg5/302/RSA.pdf [August 2017].

Rodgers, W.L. (1984). An evaluation of statistical matching. Journal of Business & Economic Statistics, 2(1), 91–102.

Rubin, D.B. (1993). Discussion: Statistical disclosure limitation. Journal of Official Statistics, 9(2), 462–468.

Saslow, E. (2012). “Jobs Day.” Monthly release of employment data: An economic, political obsession. The Washington Post, March 9. Available: https://www.washingtonpost.com/national/jobs-day-an-economic-and-political-obsession/2012/03/09/gIQADZPW1R_story.html [November 2016].

Schenker, N., and Raghunathan, T.E. (2007). Combining information from multiple surveys to enhance estimation of measures of health. Statistics in Medicine, 26(8), 1802–1811.

Schmidlin, K., Clough-Gorr, K.M., and Spoerri, A. (2015). Privacy Preserving Probabilistic Record Linkage (P3RL): A novel method for linking existing health-related data and maintaining participant confidentiality. BMC Medical Research Methodology, 15(1), 46.

Skinner, C.J. (2009). Statistical disclosure control for survey data. In D. Pfeffermann and C. Rao (Eds.), Handbook of Statistics—Sample Surveys: Design, Methods and Applications (vol. 29, pp. 381–396). Oxford, UK: North-Holland.

Skinner, C.J., and Wakefield, J. (2017). Introduction to the design and analysis of complex survey data. Statistical Science, 32(2), 165–175.

Smuk, M., Carpenter, J.R., and Morris, T.P. (2017). What impact do assumptions about missing data have on conclusions? A practical sensitivity analysis for a cancer survival registry. BMC Medical Research Methodology, 17(21), 1–7.

Statistics Canada. (2016). Approved Record Linkages. Available: http://www.statcan.gc.ca/eng/record/summ [May 2017].

Statistics Canada. (2017). Directive on Microdata Linkage. Available: http://www.statcan.gc.ca/eng/record/policy4-1 [August 2017].

Steorts, R.C., Hall, R., and Fienberg, S.E. (2016). A Bayesian approach to graphical record linkage and deduplication. Journal of the American Statistical Association, 111(516), 1660–1672.

Struijs, P., Camstra, A., Renssen, R., and Braaksma, B. (2013). Redesign of statistics production within an architectural framework: The Dutch experience. Journal of Official Statistics, 29(1), 49–71. doi:10.2478/jos-2013-0004. Available: https://www.degruyter.com/downloadpdf/j/jos.2013.29.issue-1/jos-2013-0004/jos-2013-0004.pdf [August 2017].

Sweeney, L. (1997). Weaving technology and policy together to maintain confidentiality. The Journal of Law, Medicine & Ethics, 25(2–3), 98–110.

Sweeney, L., Crosas, M., and Bar-Sinai, M. (2015). Sharing Sensitive Data with Confidence: The Datatags System. Available: https://techscience.org/a/2015101601 [June 2017].

Tancredi, A., and Liseo, B. (2011). A hierarchical Bayesian approach to record linkage and population size problems. The Annals of Applied Statistics, 5(2B), 1553–1585.

Tanur, J.M. (1999). Looking backwards and forwards at the CASM movement. In M.G. Sirken, D.J. Herrmann, S. Schechter, N. Schwarz, J.M. Tanur, and R. Tourangeau (Eds.), Cognition and Survey Research (pp. 13–19). New York: Wiley.

Turn, R., and Ware, W.H. (1976). Privacy and Security Issues in Information Systems. Available: https://www.rand.org/content/dam/rand/pubs/papers/2008/P5684.pdf [November 2016].

U.N. Economic and Social Council. (2014). Report of the Global Group on Big Data for Official Statistics. Available: https://unstats.un.org/unsd/statcom/47th-session/documents/2016-6-Big-data-for-official-statistics-E.pdf [August 2017].

U.N. Economic Commission for Europe. (2014). A Suggested Framework for the Quality of Big Data. Available: https://statswiki.unece.org/download/attachments/108102944/Big%20Data%20Quality%20Framework%20-%20final-%20Jan08-2015.pdf?version=1&modificationDate=1420725063663&api=v2 [August 2017].

U.N. Economic Commission for Europe. (2015). Common Statistical Production Architecture. Available: https://statswiki.unece.org/pages/viewpage.action?pageId=120128614 [September 2017].

U.N. General Assembly. (2014). Fundamental Principles of Official Statistics. Available: https://unstats.un.org/unsd/dnss/gp/FP-New-E.pdf [June 2017].

U.S. Census Bureau. (1996). American Housing Survey: A Quality Profile. Available: https://www.census.gov/content/dam/Census/programs-surveys/ahs/publications/h12195-1.pdf [August 2017].

U.S. Census Bureau. (1998). SIPP Quality Profile. SIPP Working Paper 230. Available: https://www.census.gov/sipp/workpapr/wp230.pdf [August 2017].

U.S. Census Bureau. (2006). Current Population Survey Design and Methodology. Technical Paper 66. Available: http://www.census.gov/prod/2006pubs/tp-66.pdf [May 2017].

U.S. Census Bureau. (2008). Factfinder for the Nation: Availability of Census Records About Individuals. Available: www.census.gov/history/pdf/cff2.pdf [May 2017].

U.S. Census Bureau. (2012). 2010 Census Summary File 1: Technical Documentation. Available: www.census.gov/prod/cen2010/doc/sf1.pdf [May 2017].

U.S. Census Bureau. (2014a). American Community Survey Design and Methodology. Available: https://www.census.gov/programs-surveys/acs/methodology/design-and-methodology.html [August 2017].

U.S. Census Bureau. (2014b). U.S. Merchandise Trade Statistics: A Quality Profile. Available: https://www.census.gov/foreign-trade/aip/quality_profile10032014.pdf [August 2017].

U.S. Census Bureau. (2017). National Health Interview Survey CAPI Manual for Field Representatives. Available: ftp://ftp.cdc.gov/pub/Health_Statistics/NCHS/Survey_Questionnaires/NHIS/2017/frmanual.pdf [August 2017].

U.S. Department of Agriculture. (2016). National Household Food Acquisition and Purchase Survey (FoodAPS): User’s Guide to Design, Data Collection, and Overview of Datasets. Available: https://www.ers.usda.gov/media/8591/userguidefoodaps.pdf [August 2017].

U.S. Department of Health, Education, and Welfare. (1973). Records, Computers, and the Rights of Citizens. Report of the Secretary’s Advisory Committee on Automated Personal Data Systems. Available: https://www.justice.gov/opcl/docs/rec-com-rights.pdf [August 2017].

U.S. Government Accountability Office. (2015). Human Capital: Update on Strategic Management Challenges for the 21st Century. GAO-15-619T. Available: http://www.gao.gov/assets/680/670294.pdf [August 2017].

U.S. Government Accountability Office. (2017). High-Risk Series: Progress on Many High-Risk Areas, While Substantial Efforts Needed on Others. GAO-17-317. Available: http://www.gao.gov/assets/690/682765.pdf [May 2017].

U.S. Government Accounting Office. (2001). Record Linkage and Privacy: Issues in Creating New Federal Research and Statistical Information. GAO-01-126SP. Available: http://www.gao.gov/assets/210/201699.pdf [February 2017].

U.S. Government Accounting Office. (2014). Computer Matching Act: OMB and Selected Agencies Need to Ensure Consistent Implementation. GAO-14-44. Available: https://www.gao.gov/assets/670/660140.pdf [August 2017].

U.S. Office of Management and Budget. (2006). Standards and Guidelines for Statistical Surveys. Available: https://obamawhitehouse.archives.gov/sites/default/files/omb/inforeg/statpolicy/standards_stat_surveys.pdf.

U.S. Office of Management and Budget. (2007). Implementation Guidance for Title V of the E-Government Act, Confidential Information Protection and Statistical Efficiency Act of 2002 (CIPSEA). Available: https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/omb/fedreg/2007/061507_cipsea_guidance.pdf [November 2016].

U.S. Office of Management and Budget. (2014a). Guidance for Providing and Using Administrative Data for Statistical Purposes. Memorandum M-14-06. Available: https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2014/m-14-06.pdf [August 2017].

U.S. Office of Management and Budget. (2014b). Statistical Policy Directive No. 1: Fundamental Responsibilities of Federal Statistical Agencies and Recognized Statistical Units. Available: https://www.gpo.gov/fdsys/pkg/FR-2014-12-02/pdf/2014-28326.pdf [August 2017].

U.S. Office of Management and Budget. (2015). Management and Oversight of Federal Information Technology. Memorandum M-15-14. Available: https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2015/m-15-14.pdf [August 2017].

U.S. Office of Management and Budget. (2016). Managing Information as a Strategic Resource. Circular No. A-130. Available: https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/OMB/circulars/a130/a130revised.pdf [August 2017].

U.S. Office of Management and Budget. (2017). Statistical Programs of the United States Government: Fiscal Year 2017. Available: https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/information_and_regulatory_affairs/statistical-programs-2017.pdf [August 2017].

Vale, S. (2009). Generic Statistical Business Process Model. Available: www1.unece.org/stat/platform/download/attachments/8683538/GSBPM+Final.pdf [July 2017].

van Buuren, S. (2012). Flexible Imputation of Missing Data. Boca Raton, FL: CRC Press.

Ver Ploeg, M., Mancino, L., Todd, J.E., Clay, D.M., and Scharadin, B. (2015). Where Do Americans Usually Shop for Food and How Do They Travel to Get There? Initial Findings from the National Household Food Acquisition and Purchase Survey. Economic Information Bulletin Vol. 138. Washington, DC: U.S. Department of Agriculture.

Wagner, D., and Layne, M. (2014). The Person Identification Validation System (PVS): Applying the Center for Administrative Records Research and Applications’ (CARRA) Record Linkage Software. CARRA Working Paper 2014-01. Washington, DC: U.S. Census Bureau. Available: https://www.census.gov/content/dam/Census/library/working-papers/2014/adrm/carra-wp-2014-01.pdf [July 2016].

Wallgren, A., and Wallgren, B. (2007). Register-Based Statistics: Administrative Data for Statistical Purposes. Hoboken, NJ: Wiley.

Wang, X., Chan, T.-H., and Shi, E. (2015). Circuit ORAM: On tightness of the GoldreichOstrovsky lower bound. In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security (pp. 850–861). New York: Association for Computing Machinery.

Warner, S.L. (1965). Randomized response: A survey technique for eliminating evasive answer bias. Journal of the American Statistical Association, 60(309), 63–69.

Weissman, J., Parker, J.D., Miller, D.M., Miller, E.A., and Gindi, R.M. (2016). The relationship between linkage refusal and selected health conditions of survey respondents. Survey Practice, 9(5). Available: http://www.surveypractice.org/index.php/SurveyPractice/article/view/342 [February 2017].

Xiao, X., and Tao, Y. (2007). M-invariance: Towards privacy preserving re-publication of dynamic datasets. In Proceedings of the 2007 ACM SIGMOD International Conference on Management of Data (pp. 689–700). New York: Association for Computing Machinery. doi:10.1145/1247480.1247556.

Zhang, G., Parker, J.D., and Schenker, N. (2016). Multiple imputation for missingness due to nonlinkage and program characteristics: A case study of the National Health Interview Survey linked to Medicare claims. Journal of Survey Statistics and Methodology, 4(3), 319–338.

Zhang, L.-C. (2012). Topics of statistical theory for register-based statistics and data integration. Statistica Neerlandica, 66(1), 41–63.