Pseudonymization

Pseudonymization is a data management and de-identification procedure by which personally identifiable information fields within a data record are replaced by one or more artificial identifiers, or pseudonyms.

1. What is an example of pseudonymization?
2. What is the difference between anonymization and pseudonymization?
3. What are examples of pseudonymization in GDPR?
4. What is the purpose of pseudonymization?

What is an example of pseudonymization?

Data masking and hashing are examples of pseudonymizing sensitive data. Data masking is the de facto standard for achieving pseudonymization. It replaces sensitive data with fictitious yet realistic data, which helps reduce data risk while preserving data utility.

What is the difference between anonymization and pseudonymization?

With anonymisation, the data is scrubbed for any information that may serve as an identifier of a data subject. Pseudonymisation does not remove all identifying information from the data but merely reduces the linkability of a dataset with the original identity of an individual (e.g., via an encryption scheme).

What are examples of pseudonymization in GDPR?

For example, you can use a customer number to identify an individual, and store information that directly identifies an individual, such as personal identification number, separately. In this way you pseudonymize the sensitive data.

What is the purpose of pseudonymization?

Pseudonymisation is defined within the GDPR as “the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, as long as such additional information is kept separately and subject to technical and organizational measures to ...