ANONYMISATION AND PSEUDONYMISATION OF PERSONAL DATA

This blog post is written by Erik Myrberg, lawyer at Synch

Recital 26 of the GDPR clarifies that the principles of data protection should not apply to anonymous information, namely information which does not relate to an identified or identifiable natural person or to personal data rendered anonymous in such a manner that the data subject is no longer identifiable. Yet, the same recital states that personal data which have undergone pseudonymisation and which could be attributed to a natural person by the use of additional information, should be considered to be information on an identifiable natural person. This has led to confusion among some regarding the difference between anonymisation and pseudonymisation.

According to WP29 (an advisory body now replaced by the EDPB) anonymised data is data which previously referred to an identifiable person, but where identification is no longer possible due to the anonymisation. Therefore, anonymisation must prevent any party from singling out an individual otherwise the data is not deemed to be anonymised and thus falls within the definition of personal data according to the GDPR. A common misconception in regard to anonymisation is that handing over data sets with personal data masked or removed would not constitute processing of personal data. This may only be true if the original data sets are either deleted or permanently altered in the same way (and under the circumstances that all personal data is masked or removed from the data sets in such manner that restoration is impossible). In addition, one must also ensure that the data sets cannot be used in combination with other data to identify a natural person, since otherwise the data sets would be considered to contain personal data.

Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific natural person without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. According to the GDPR, pseudonymisation can be utilized to enhance the level of security connected with processing personal data. It is worth to keep in mind that pseudonymisation does not result in personal data being anonymized nor losing its status as personal data in accordance with the GDPR.
There are today several different techniques available for both anonymisation and pseudonymisation and the matter of encryption is subject to intense research. It is unfortunately not possible to give any general advice on which technique to use and when, as this needs to be determined on a case-by-case-basis. What can be said is that prior to conducting anonymisation or pseudonymisation, it is recommended to consult with a security expert in order to ensure that the desired result is obtained and to avoid any misunderstandings.
On a final note, both the act of anonymisation and pseudonymisation of personal data are still considered to be processing activities under the GDPR, which necessitates considerations of inter alia the lawfulness of such processing and how to comply with retention times obligated by law. If you have any questions or concerns regarding anonymisation or pseudonymisation, please do not hesitate to contact us.

News and Insights
Blog Posts

Responsibility of online platforms and the regressive opinion of the Advocate General

08/12/2020

This blog post was written by My Byström, lawyer at Synch A comment on the opinion of the Advocate General in joined cases Youtube (C-682/18) and Cyando (C‑683/18) In December, the CJEU is expected to deliver its judgement in the joined cases Youtube and Cyando, where questions regarding the liability of platforms for user uploaded materials have […]

Press release

Synch recognised for work on landmark copyright case

30/03/2021

Innovative business law firm Synch received the Impact Case of the Year (Sweden) award at the Managing IP Awards 2021 in recognition of its work on the Telia Sverige v Warner Bros Entertainment & Ors case. The awards were presented in a virtual ceremony, which was broadcast online on March 30 2021. The decision of […]

Press release

Synch has acted as legal advisor to Slitevind AB

04/03/2021

Synch has acted as legal advisor to Nasdaq First North listed company Slitevind AB in a directed new issue of approximately SEK 43 million. The new share issue was carried out as an accelerated bookbuilding procedure together with ABG Sundal Collier. Slitevind, with its headquarter in Visby, is active in wind power production with wind […]

Blog Posts

BOLAGSSTÄMMA 2021 – HÖG TID ATT BESTÄMMA SIG!

03/03/2021

Många bolagsstyrelser har planerat sina årsstämmor sedan flera månader tillbaka. Andra har inte kommit riktigt lika långt. I det senare fallet är det hög tid att ta ställning till i vilken form man önskar genomföra årets stämma. Fortfarande gäller de tillfälliga lättnader för genomförandet av bolagsstämmor som riksdagen beslutade om under 2020 till följd av […]

News

Synch has been shortlisted for Firm of the Year– Copyright & Design

23/02/2021

Managing IP has published the EMEA shortlists for the 16th annual Managing IP Awards 2021 on March 30. We are honoured to announce that Synch has been shortlisted for “Firm of the Year – Copyright & Design”. Fantastic news for Synch and our brilliant IP team!

Press release

Synch acted as legal advisor to Insurely

19/02/2021

Synch acted as legal advisor to Insurely in connection with the company’s recently completed financing round, with Luminar Ventures as the main investor, of SEK 25 million. The company offer API services in insurance data, which enables insurers and financial companies to be able to personalize and streamline the customer journey online, optimize their pricing […]

News

Synch has been acknowledged by the World Trademark Review 1000

18/02/2021

We are proud and honoured to announce that Synch has been acknowledged by the World Trademark Review 1000: The World´s Leading Trademark Professionals for 2021! Congratulations to our lawyers Sara Sparring and Mathilda Nordmark who have received individual recognition. Mathilda for enforcement and litigation and Sara has once again, as the only Swedish lawyer, been recognised in all three categories anti-counterfeiting, enforcement & […]