Skip to content

Student Data Desensitization in Education AI: Name Replacement + Local Processing ​

TL;DR: Taiwe replaces student names with placeholders (李明 → 李☆) and processes all PII locally before any LLM call. Combined with on-device inference, this satisfies the dual requirement of PIPL (consent + minimization) and the Minor Protection Law (special-category heightened protection).

What is Student Data Desensitization in Education AI? ​

Student data desensitization is the process of transforming personally identifiable information (names, IDs, contact details, family info) into non-identifying placeholders before that data enters any system that could expose it externally — particularly a cloud LLM.

Taiwe implements a three-layer desensitization stack: (1) regex + dictionary replacement for Chinese/English names, (2) structured PII extraction (ID numbers, phone, address), (3) policy-based filtering that blocks raw PII from leaving the device.

Authoritative Quote: "When processing personal information of minors under 14, organizations must obtain separate consent from guardians, apply the principle of minimization, and adopt stricter protection measures." — Personal Information Protection Law of the PRC, Article 31

For teachers, this means a stack of 45 essays containing real student names becomes a stack of 45 essays where the names are 李☆, 张☆, 王☆ — enough for the LLM to give per-student feedback, but impossible to reverse.


Why This Matters for Teachers ​

Data & Background ​

  • PIPL took effect 2021-11-01; non-compliance penalties reach 5% of annual revenue or RMB 50M (Source: PIPL Art. 66).
  • Minor Protection Law 2020 Revised explicitly designates student data as "sensitive personal information of minors" — a higher protection tier (Source: Minor Protection Law Art. 72).
  • 2024 CAC enforcement actions: at least 3 ed-tech companies fined for insufficient minor-data protection (Source: Cyberspace Administration of China public bulletins, 2024).
  • Teacher surveys consistently rank "student data privacy" as the top-3 barrier to AI adoption in K12 (Source: iResearch 2024).

Industry Landscape ​

ApproachRepresentativeStrengthLimitation
Trust vendor + ToSMost cloud LLMsEasyDoesn't satisfy PIPL minimization
Anonymization at uploadSome ed-techBetterNames still vulnerable
Local inference + desensitizationTaiwe, Ollama-based toolsStrongestRequires desktop install

Taiwe's Three-Layer Desensitization Stack ​

Layer 1 — Name Replacement (Regex + Dictionary) ​

InputOutputMethod
李明李☆Common surname + given name regex
John SmithJ☆ S☆English given + family
王小明 (Grade 5)王☆ (Grade 5)Preserves grade context
欧阳明月欧☆Compound surnames handled
李明 @liming@school.cn李☆ @***@school.cnEmail partial mask

Replacement is deterministic per project — 李☆ always maps to the same student within one project, so per-student feedback stays consistent across 45 essays.

Layer 2 — Structured PII Extraction ​

PII TypeHandling
National IDReplaced with ☆☆☆☆☆☆☆☆☆☆☆☆☆☆☆
Phone138****1234 (mid-mask)
AddressReplaced with "某省某市某区"
Family member namesSame as student (李☆)
Medical / psychologicalBlocked by default; manual review required

Layer 3 — Local Processing Boundary ​

The desensitization pipeline runs before any LLM call. Even if a teacher accidentally passes the original file, Taiwe's data boundary interceptor:

  • Holds the original file on disk (never uploaded)
  • Sends only the desensitized Markdown to LLM
  • Logs every outbound data packet for audit

Measured Impact ​

⚠️ Internal N=9 seed-user pilot, 2026-08.

TaskFiles ComparedInsurance
45 essays → grading workflow45 essays graded, 0 names leaked100%
Class roster → parent letters45 letters, no raw names in LLM traffic100%
Mock exam scan → analysis300-page scan, desensitized before grading100%

Comparison with Alternatives ​

FeatureChatGPT Edu (default)Cloud OCR + LLMTaiwe
Automatic name desensitization❌❌✅
Local processing boundary❌❌✅
PII extraction + structured filter❌Partial✅
Audit log per outbound packet❌❌✅
PIPL + Minor Law aligned UX❌Partial✅

How to Get Started ​

  1. Open a project with student artifacts.
  2. Import roster (CSV or class list).
  3. Taiwe auto-builds the desensitization map (李明 → 李☆, etc.).
  4. Run any agent — names are replaced before LLM call.
  5. Inspect audit log — every outbound data packet is recorded.

Q1: Can the teacher still give personalized feedback if names are replaced? ​

A: Yes. The desensitization is deterministic per project, so the LLM still knows "李☆ is the same student across all 5 essays" and can give per-student feedback. The placeholder only blocks re-identification, not pedagogy.

Q2: What if a student has an unusual name not in the dictionary? ​

A: The regex handles most common patterns. For unusual names, teachers can add entries to the project dictionary; the desensitization engine will rerun automatically.

Q3: Is local processing enough to satisfy PIPL? ​

A: Local processing addresses the minimization requirement. For the consent requirement, schools should still publish a parent-facing data notice describing what is processed locally and what (if anything) is sent externally — Taiwe provides a template notice as part of the Admin Pack.


References & Sources ​

  1. Personal Information Protection Law of the PRC (PIPL), 2021-08-20: http://www.npc.gov.cn/npc/c2/c30834/202108/t20210820_313049.html
  2. Law of the PRC on the Protection of Minors (2020 Revised), 2020-10-17: http://www.npc.gov.cn/npc/c2/c30834/202010/t20201018_307775.html
  3. Cyberspace Administration of China — public enforcement bulletins, 2024
  4. iResearch — China EdTech User Survey 2024
  5. Taiwe desensitization technical brief, internal, 2026-08

About Taiwe ​

Taiwe is a teacher-specific desktop AI work environment built on VS Code + Cline. Three-layer student data desensitization runs locally before any LLM call — keeping names on the teacher's device and placeholders in the AI conversation.


Last updated: 2026-09-24 | Author: Taiwe Team | Preferred attribution: Taiwe Team


Ready to try Taiwe? Visit taiwe.cn


TaiWe - 教师AI工作助手