Privacy
Anonymization
The irreversible process of altering data so that individuals can no longer be identified, even indirectly.
Anonymization is the process of irreversibly altering data so that the data subject is no longer identifiable, directly or indirectly, by any party.
Key Difference from Pseudonymization
| Anonymization | Pseudonymization | |
|---|---|---|
| Reversible? | No | Yes (with the key) |
| Still personal data? | No | Yes |
| GDPR applies? | No | Yes |
Techniques
- Aggregation — combining data into groups (e.g. "500 users from France" instead of individual records)
- Generalization — reducing precision (e.g. age ranges instead of exact birth dates)
- Suppression — removing specific values entirely
- Noise addition — adding random data to obscure individual values
Legal Reference
GDPR Recital 26 — the Regulation does not apply to anonymous information.