GDPR Recital 29 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this law. Contains: the full text of every article, recital and provision of this law. Everything links back to its source on overview.legal — legal information, not advice.

Recital 29 — incentives for pseudonymisation within controller

Controllers Anonymization Personal Data
In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗
Version history 2
  • 2016-05-04in force CELEX 02016R0679-20160504
  • 2016-04-27 CELEX 32016R0679

In order to create incentives to apply pseudonymisation when processing personal data, measures of pseudonymisation should, whilst allowing general analysis, be possible within the same controller when that controller has taken technical and organisational measures necessary to ensure, for the processing concerned, that this Regulation is implemented, and that additional information for attributing the personal data to a specific data subject is kept separately. The controller processing the personal data should indicate the authorised persons within the same controller.

Related across sources

Case Law NSS - 1 As 183/2023-62 Enforcement APDCAT sanctions Madremanya City Council for exposing applicants' sensitive data in tender Case Law Rotterdam Court: DPA did not err in finding ING contactless chip payments GDPR-compliant Case Law SG Nürnberg - S 5 SF 65/24 DS Case Law Rb. Den Haag - C/09/689833 Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data