News & Analysis as of June 3, 2025

General Data Protection Regulation (GDPR) › Anonymization

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

New EDPB Opinion on Personal Data Protection in AI

Barnea Jaffa Lande & Co. on 1/3/2025

Recently, the European Data Protection Board (EDPB) adopted an opinion addressing key data protection concerns arising from the use of Artificial Intelligence (AI) models. The opinion specifically focuses on how GDPR...more

Federal Trade Commission Hashes Out Aggressive Interpretation of Data Anonymization: What You Need to Know

Ogletree, Deakins, Nash, Smoak & Stewart,... on 8/19/2024

The Federal Trade Commission (FTC) has a long-standing habit of creating legal obligations through blog posts. Recent communications from the FTC by way of its Office of Technology Blog evidence an aggressive expectation...more

Anonymization and the GDPR – Clarity from the European Courts? Not so Fast!

Foley Hoag LLP - Security, Privacy and the... on 5/19/2023

As we’ve written about before, the question of anonymization can be tricky. When is something “anonymized” or merely “de-identified” or “pseudonymous” — and when does it matter? This is a particularly fraught issue under...more

Deidentification vs Anonymization: What Is Enough?

Fox Rothschild LLP on 11/28/2022

For deidentification under the traditional laws like HIPAA, removal of identifiers qualifies. That was a key facet of what I discussed last week on an anonymization panel during the IAPP Europe Data Protection Congress...more

UK Data Protection Bill: Examination of Key Provisions (Part 2)

Latham & Watkins LLP on 8/19/2022

Areas of interest include anonymisation, “recognised legitimate interests”, and the ICO’s role. The UK Data Protection and Digital Information Bill (the Bill) sets out the government’s proposals for reforming the current...more

Anonymization Governance: Why It's Important for GDPR and for CPRA

Fox Rothschild LLP on 3/11/2022

What does the United Kingdom's Information Commissioner's Office's draft guidance say about governance and anonymization? Why is it important for GDPR and for the host of new US Privacy laws, including CPRA, CDPA and CPA? ...more

China's Draft Personal Information Protection Law

WilmerHale on 11/3/2020

The Standing Committee of China’s National People’s Congress on October 21 released the draft Personal Information (PI) Protection Law (the Draft Law) for public comments through November 19. It consists of 70 articles across...more

[Event] ACEDS Benelux Chapter Panel Discussion: What Will 2020 Bring for eDiscovery? - September 29th, Amstelveen, Netherlands

Association of Certified E-Discovery... on 9/1/2020

Join the ACEDS Benelux Chapter for a unique panel discussion and networking event for everyone interested in eDiscovery. A panel of experts will discuss developments in the eDiscovery world that we can expect in 2020....more

German BfDI Initiates Public Consultation Process Regarding Anonymization under the GDPR

McDermott Will & Emery on 2/25/2020

The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) recently announced a public consultation process regarding anonymization under the European Union General Data Protection Regulation (GDPR)...more

UK MRC Clarifies When Health Data Is Anonymised in Research Context

Latham & Watkins LLP on 2/24/2020

Research participants must identify which data sets constitute personal data to ensure compliance with the GDPR. The UK Medical Research Council (MRC) has published a useful guidance note on the identifiability,...more

Is it possible for a token to still be considered “personal information?”

BCLP on 2/3/2020

Maybe. “Tokenization” refers to the process by which you replace one value (e.g., a credit card number) with another value that would have “reduced usefulness” for an unauthorized party (e.g., a random value used to...more

Is it possible for data that has undergone salted-hashing to still be considered “personal information?”

BCLP on 1/31/2020

Maybe. “Salting” refers to the insertion of a random value (e.g., a number or a letter) into personal data before that data is hashed. Whether personal information that has undergone salting and hashing is still...more

The eData Guide to GDPR: Anonymization and Pseudonymization Under the GDPR

Morgan Lewis on 12/9/2019

The EU General Data Protection Regulation (GDPR) regulates the use of personal data collected from European data subjects, including activities of non-European companies that target or process European data subject personal...more

Medical Research Council Advises on How to Anonymise Information for Research Purposes

Hogan Lovells on 10/16/2019

Anonymisation has always been (and still is) a real challenge for those carrying out clinical research. To shed some light on this matter, the Medical Research Council (MCR) – which is part of UK Research and Innovation – has...more

Privacy FAQs: Can a service provider use and transfer personal information if they anonymize or aggregate it?

BCLP on 5/7/2019

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

At A Glance: De-Identification, Anonymization, and Pseudonymization under the GDPR

BCLP on 7/25/2017

De-identification of data refers to the process used to prevent personal identifiers—both direct and indirect—from being connected with information. The EU General Data Protection Regulation (“GDPR”), which will replace the...more

16 Results

View per page

Page: of 1

General Data Protection Regulation (GDPR) › Anonymization

"My best business intelligence, in one easy email…"