Pseudonymization and Anonymization

Pseudonymization and anonymization are important techniques for protecting personal data. While they sound similar, they have different meanings and implications under GDPR.

What is Pseudonymization?

Article 4(5) defines pseudonymization as the processing of personal data in such a manner that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures.

Examples of pseudonymization:

• Replacing names with reference numbers or codes
• Tokenization of data
• Encryption with key management
• Hashing with salt

Benefits of Pseudonymization

Pseudonymization is encouraged by GDPR because it:

• Reduces risks to data subjects
• Helps meet data protection obligations
• Allows data to remain useful for certain purposes
• Is specifically mentioned as an appropriate security measure (Article 32)
• Can help with Privacy by Design and Default (Article 25)

Important: Pseudonymized Data is Still Personal Data

Crucially, pseudonymized data is still considered personal data under GDPR if:

• You retain the means to re-identify individuals
• Or someone else could re-identify the individuals

Therefore, pseudonymized data must still comply with all GDPR principles and requirements.

What is Anonymization?

Anonymization is the process of removing all identifying information from data such that individuals can no longer be identified. If data is truly anonymized:

• It is no longer considered personal data
• GDPR does not apply
• Re-identification must be impossible or highly improbable

Achieving Effective Anonymization

True anonymization is difficult to achieve. Data must be anonymized such that:

• Individuals cannot be singled out
• Individuals cannot be linked across datasets
• Information about individuals cannot be inferred

Techniques include:

• Data aggregation
• Data masking
• Generalization
• Noise addition
• Differential privacy

Risks of Anonymization

Organizations must be aware that:

• Anonymization may be reversible with sufficient resources or additional data
• Combining anonymized datasets can lead to re-identification
• Advances in technology may make previously anonymous data identifiable

When to Use Each Technique

Use pseudonymization when:

• You need to maintain some utility in the data
• You may need to re-identify individuals for specific purposes
• You want to reduce risks while continuing to process personal data

Use anonymization when:

• You don't need to identify individuals at all
• You want to remove data from GDPR scope
• You're using data for statistical or research purposes where individual identification isn't needed