Processing personal data so it can no longer be attributed to an individual without additional information.
Pseudonymisation processes personal data so it cannot be attributed to a specific individual without separate, securely stored additional information. Unlike anonymisation (which removes identification entirely), pseudonymised data remains personal data but with reduced risk. Replacing names with codes while keeping the code-to-name mapping separate is pseudonymisation. GDPR recognises pseudonymisation as a risk-reduction measure that can support processing under certain conditions.
Why It Matters
The DSC Perspective:
Pseudonymisation reduces risk while retaining data utility. It's a useful technique for development environments, analytics, and reducing exposure in day-to-day processing.