Conclusion

The RGPD defines numerous measures for the protection of individuals, which make the use of personal data by data controllers binding. Although there are accommodations that allow data to be used while remaining compliant, in many cases these accommodations are insufficient. The data controller's only alternative is to anonymize the data. However, anonymization is tricky to implement, and there are still many misunderstandings surrounding this little-known discipline. The main misunderstanding is the confusion between anonymization and pseudonymization. Because of these confusions and the seriousness of the risks associated with poor implementation, the G29 has published an opinion describing the risks associated with anonymization and the methods for reducing them. However, reducing the risks associated with re-identification is not the only issue at stake in anonymization, since it is...