Sign in Subscribe

Topic

Anonymization

Anonymization is the process of transforming personal data so that individuals can no longer be identified, taking into account the means reasonably likely to be used for re-identification. Explore guidance on anonymization under the GDPR and U.S. privacy laws, including de-identification, pseudonymization, re-identification risk, statistical disclosure controls, data sharing, AI training data, regulatory standards, and practical techniques for reducing privacy risk.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

When “Aggregated” Isn’t Anonymous: The New York Attorney General Pushes the Boundaries of App Data Disclosures

The New York Attorney General’s Matis case shows that “aggregated” data is not necessarily anonymous. If a third party can de-aggregate and re-identify individuals, the sharing should be disclosed—and contracts should expressly prohibit re-identification.

GDPR Data Security Explained: A Practical Guide to Technical and Organizational Measures

A practical guide to GDPR data security requirements, including risk assessments, technical and organizational measures, encryption, pseudonymization, resilience, processor oversight, staff training, authentication, and the ongoing testing needed to protect personal data.