The EDPB recently issued guidelines on anonymisation for consultation.
The guidelines set out a framework for determining if data is anonymous, covering both legal and technical aspects of anonymity.
In the legal context, the guidance looks at the idea that the question of whether data is anonymous is one which may differ between entities and helps to determine which entities need to be considered. The guidance also considers how to apply the definition of personal data and complicating issues of how to handle data sets which contain both personal and anonymous data and how to comply with GDPR in the anonymisation process.
The consultation is open until 3 October 2026 and the full guidance can be found here.
