Re:Microsoft’s commitment to GDPR, privacy and customers’ co...
by theyinwhy on Tuesday May 22, 2018 @11:46AM
(#17126800)
No, look at the actual law and you see that is plain wrong:
(26)
The principles of data protection should apply to any information concerning an identified or identifiable natural person. Personal data which have undergone pseudonymisation, which could be attributed to a natural person by the use of additional information should be considered to be information on an identifiable natural person.
[1] By contrast to anonymization, Article 4(5) of the GDPR defines pseudonymization as “the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information.” By holding the de-identified data separately from the “additional information,” the GDPR permits data handlers to use personal data more liberally without fear of infringing the rights of data subjects. This is because the data only becomes identifiable when both elements are held together.
[1] https://iapp.org/news/a/looking-to-comply-with-gdpr-heres-a-...