According to the GDPR, how is pseudonymous personal data defined?

The correct answer is A. Data that can no longer be attributed to a specific data subject without the use of additional. Pseudonymisation is a technique that replaces, removes or transforms information that identifies individuals, and keeps that information separate from the rest of the data. Pseudonymised data is still personal data under the GDPR, because it can be re-identified with the use of…

Legislative Framework

Question

Options

AData that can no longer be attributed to a specific data subject without the use of additional
BData that can no longer be attributed to a specific data subject, with no possibility of re-identifying
CData that has been rendered anonymous in such a manner that the data subject is no longer
DData that has been encrypted or is subject to other technical safeguards.

How the community answered

(29 responses)

A
90% (26)
B
3% (1)
D
7% (2)

Explanation

Pseudonymisation is a technique that replaces, removes or transforms information that identifies individuals, and keeps that information separate from the rest of the data. Pseudonymised data is still personal data under the GDPR, because it can be re-identified with the use of additional information. However, pseudonymisation can reduce the risks of processing personal data and help comply with data protection principles and obligations. Pseudonymisation is different from anonymisation, which is the process of irreversibly transforming personal data so that the data subject is no longer identifiable.

Topics

#pseudonymization#Article 4 GDPR#GDPR definitions#re-identification

Community Discussion

No community discussion yet for this question.

Full CIPP-E Practice