Brain MRI data contain sensitive identity information not only in facial features, but also in the unique anatomical structure of the brain, or “brain fingerprint.” While defacing is commonly used to remove facial information, it may not be sufficient to prevent re-identification from brain anatomy.

In this presentation, we show that individuals can remain identifiable even after defacing, highlighting the privacy limits of current anonymization practices. These findings motivate ongoing work toward stronger MRI anonymization strategies that better protect brain fingerprints while preserving the scientific value of the data.