Privacy

Anonymization

The irreversible process of altering data so that individuals can no longer be identified, even indirectly.

Anonymization is the process of irreversibly altering data so that the data subject is no longer identifiable, directly or indirectly, by any party.

Key Difference from Pseudonymization

AnonymizationPseudonymization
Reversible?NoYes (with the key)
Still personal data?NoYes
GDPR applies?NoYes

Techniques

  • Aggregation — combining data into groups (e.g. "500 users from France" instead of individual records)
  • Generalization — reducing precision (e.g. age ranges instead of exact birth dates)
  • Suppression — removing specific values entirely
  • Noise addition — adding random data to obscure individual values

GDPR Recital 26 — the Regulation does not apply to anonymous information.

Related Terms

Personal DataPrivacy

Any information that can identify a living individual, directly or indirectly.

Data SubjectPrivacy

The identified or identifiable person whose personal data is being processed.

Data MinimizationPrivacy

The principle that only the minimum amount of personal data necessary should be collected and processed.

PseudonymizationPrivacy

Processing personal data so it can no longer be attributed to a specific person without additional information kept separately.

Adequacy DecisionAudit Trail