{"id":18265,"date":"2023-02-16T10:44:44","date_gmt":"2023-02-16T09:44:44","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=18265"},"modified":"2023-02-16T10:44:48","modified_gmt":"2023-02-16T09:44:48","slug":"anonymous-data","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/anonymous-data\/","title":{"rendered":"Anonymous data: what is it?"},"content":{"rendered":"\n
In accordance with the provisions of Recital 26 of the GDPR<\/span>, data protection regulations, and the GDPR in particular, do not apply to anonymous or anonymised data<\/strong>. But, what is this and when can a set of information be considered as such? We will try to solve this in this post:<\/p>\n\n\n\n Anonymous or anonymised data or information is something that makes it impossible to identify a natural person<\/span> through different techniques that “separate” the information that identifies someone from the data that prevents their identification. The EU analysed the different anonymisation techniques in this format:<\/p>\n\n\n\n This impossibility of relating the anonymised information back to its original owner must be analysed from the perspective that there is no “reasonable probability” that this identification will occur.<\/p>\n\n\n\n For this, criteria such as the time that a re-identification process would take, the costs associated with it or the technological means required to achieve this must be assessed.<\/p>\n\n\n\n As said, the GDPR is not applicable to anonymous information<\/strong>. If we want to justify the non-necessity to comply with the GDPR based on the fact that we process anonymous information, we must be able to justify that this characteristic is actually fulfilled<\/strong>, making it impossible to identify or re-identify the person to whom the information was originally related.<\/p>\n\n\n\n Pseudonymised information does not allow for the identification of people<\/strong> unless additional information is used, provided that such information appears separately or independently.<\/p>\n\n\n\n Therefore, having someone’s personal information associated with a code and then separately having the information on who that code belongs to is not anonymous but pseudonymous information. The difference is essential because the GDPR does<\/span> apply to pseudonymous data<\/strong>, so all the requirements it sets out must be taken into account.<\/p>\n\n\n\nWhat is anonymised or anonymous data?<\/strong><\/h2>\n\n\n\n
\n
\n
What is the difference between anonymous and pseudonymous information?<\/strong><\/h2>\n\n\n\n