Splitting Two Citizens Back Apart

October 18, 2026 · Part 12 of 20

Opening Scene

Months after a merge, a clerk discovers a problem: two file cards merged as one citizen were actually two different people who happened to share a name, a similar birth date, and, by unlucky coincidence, addresses two doors apart. Every record, filing, and cross-reference made against the merged file since that day now needs to be sorted back out — which activity genuinely belonged to which person. Simply deleting the merged file and starting over would erase legitimate history that belongs to both individuals. The registry needs a deliberate, careful un-merge process, precisely because merging was never meant to be a one-way door.

In Plain English

Merging combines two or more matched records into a single golden record, per the matching and survivorship processes covered earlier in this series. Un-merging reverses that decision when a match is later found to be wrong, splitting a combined record back into its correct separate entities — and, critically, correctly reattributing every transaction, interaction, and downstream reference that accumulated against the merged record during the time it was (incorrectly) treated as one. A mature MDM program treats every merge as reversible in principle, maintaining enough history and provenance to make an un-merge possible without silent, permanent data loss, even though un-merges are rare in practice.

The Old Way

Handling merges and un-merges safely has always depended on a few disciplined practices:

  • Never physically destroy the source records that fed a merge — the merged golden record should reference its contributing source records, not replace and discard them, so that if the merge is later found to be wrong, the original, pre-merge data is still recoverable.
  • Track post-merge activity with enough granularity to un-attribute it later — every transaction or interaction recorded against a golden record after a merge needs enough context (which source system it originated from, when) to be correctly reassigned during an un-merge, rather than being permanently and ambiguously blended.
  • Treat merge confidence thresholds conservatively for hard-to-reverse consequences — a merge that will immediately trigger an irreversible downstream action, like a financial consolidation, deserves a higher confidence bar before auto-merging than one that merely affects an internal report, because the cost of a wrong high-consequence merge is much higher.

Un-merges are rare by design, precisely because a well-tuned matching and survivorship process should get most merges right the first time — but “rare” is not “impossible,” and a program that can’t un-merge safely when it needs to is taking on real, avoidable risk.

What’s Changing (and Why AI Is the Reason)

  1. AI-assisted anomaly detection can flag suspicious merged records after the fact — for instance, a merged customer record whose post-merge activity pattern looks statistically inconsistent with a single person or organization behaving normally — surfacing likely bad merges for review well before a downstream consequence makes the error obvious some other way.
  2. AI-assisted un-merge attribution can help reconstruct which post-merge transactions most likely belong to which of the split-apart entities, using patterns in the transaction data itself, when the original source-system linkage alone isn’t perfectly clean. This doesn’t remove the need for human review on a genuine un-merge, but it substantially reduces the manual reconstruction effort involved.
  3. As AI-assisted matching increases the volume of automated, low-friction merges, the discipline of safe, reversible merging becomes proportionally more important, not less — a higher merge rate without a correspondingly reliable un-merge capability simply means more risk accumulating in the background, waiting to surface.

The Metaphor, Fully Extended

Registry ElementMaster Data Management Concept
A merged file later found to actually describe two different citizensA golden record whose underlying match is discovered to be incorrect
Keeping the original two file cards on hand rather than discarding them at merge timePreserving contributing source records rather than destroying them, enabling future un-merge
Every filing made against the merged file logged with which office and date it came fromPost-merge activity tracked with enough provenance detail to reattribute it correctly later
A higher bar of certainty required before merging two files tied to an active financial matterConservative merge confidence thresholds for high-consequence, hard-to-reverse cases
An assistant flagging a merged file whose recent activity looks statistically inconsistent with one personAI-assisted anomaly detection, surfacing likely bad merges for review

For Beginners: What to Actually Do

  • Understand that a merge is a decision, not a permanent physical deletion — a well-run MDM program keeps enough underlying history to reverse a bad merge.
  • Practice thinking through what would need to happen to un-merge a record you’re working with — if the answer is “I have no idea,” that’s worth flagging to whoever owns the process.
  • Notice the difference between a low-stakes merge (affecting an internal report) and a high-stakes one (triggering an irreversible downstream action), and expect — and support — a higher confidence bar for the latter.
  • When you spot data that looks like it might be an incorrectly merged record, report it rather than assuming automation will catch it — anomalies like this are exactly what stewardship review queues, covered in Article 10, exist for.

For Practitioners and Leaders: The Deeper Layer

  • Architect your golden record storage to preserve contributing source records and post-merge activity provenance by default, treating reversibility as a first-class design requirement, not an afterthought.
  • Set differentiated, risk-aware confidence thresholds for auto-merging, reserving the highest bar for entities where an incorrect merge would trigger hard-to-reverse downstream consequences.
  • Build and rehearse an actual un-merge runbook before you need one under pressure — discovering the process gaps during a real incident is far more costly than discovering them in a planning exercise.
  • Use AI-assisted anomaly detection to proactively surface likely bad merges, and scale your review capacity to match, especially as AI-assisted matching increases your overall merge volume.

Quick Recap

  • Un-merging reverses an incorrect match, splitting a combined golden record back apart and correctly reattributing everything recorded against it since the merge.
  • Safe un-merging depends on preserving source records rather than destroying them, tracking post-merge activity with enough provenance to reattribute it, and using conservative confidence thresholds for high-consequence merges.
  • AI-assisted anomaly detection can surface likely bad merges proactively, and AI-assisted attribution can reduce the manual effort of reconstructing an un-merge.
  • Rising automated merge volume from AI-assisted matching makes reliable un-merge capability more important, not less, since it’s the safety net for a process operating at greater scale and speed.

Where This Fits in the Series

Article 11 covered propagating corrections outward; this article covered undoing a specific kind of correction gone wrong. Article 13 turns to a different production concern entirely: keeping matching and reconciliation performant as the number of entities grows very large.