Anonymizing data
If you manage to anonymize data, the GDPR no longer applies to that data. Unfortunately, the term is often used erroneously. Anonymization of data means that it is no longer possible to identify a natural person from the data. This requires stringent proof. Replacing the identity of persons in a dataset with numbers, GUIDs, or hashes does not satisfy this requirement, since it is still possible to reverse engineer and identify the original set of persons, especially if you have a list of possible persons to compare against. This process is called pseudonymization and is still considered personal data, according to the GDPR. Pseudonymized data is defined as data where it is possible to identify a person given external data. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access