Skip to content
News · ICO EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

ICO: How can privacy-enhancing technologies contribute to compliance with data protection legislation?

How can Privacy-Enhancing Technologies (PETs) contribute to compliance with privacy regulations?

Summary

In short: • PETs can help you demonstrate an approach where privacy protection is "naturally" and "by default" integrated into your processes. • PETs can help you comply with the principle of data minimization by ensuring that you only process the data you need for your purposes, and that you provide an appropriate level of security for your processing. • You can use PETs to provide access to datasets that would otherwise be too sensitive to share, while simultaneously ensuring that the personal data of individuals remains protected.

Full text

How can Privacy-Enhancing Technologies (PETs) help in complying with data protection regulations? An overview:

  • PETs can help you demonstrate an approach where data protection is "naturally" and "by default" built into your processes.
  • PETs can help you comply with the principle of data minimization, by ensuring that you only process the data you need for your purposes, and providing an appropriate level of security for your processing.
  • You can use PETs to provide access to datasets that would otherwise be too sensitive to share, while simultaneously protecting the data of individuals.
  • However, you should not consider PETs as an "all-encompassing solution" for complying with data protection regulations. Your processing must still be lawful, fair, and transparent.
  • You must conduct a case-by-case assessment (for example, through a Data Protection Impact Assessment (DPIA)) to determine whether PETs are suitable for your purposes.
    https://ico.org.uk/media/about-the-ico/consultations/4021464/chapter-5-anonymisation-pets.pdf

This content has been automatically translated using machine translation. The original version is available in the source language.


This content was automatically translated using machine translation. The original version is available in the source language.

How it connects

Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Jan 28, 2020 Personal Data Privacy by Design & Default Processing
C-175/20 SIA 'SS' v Valsts ieņēmumu dienests In Case C-175/20, the Court of Justice of the EU interpreted GDPR Articles 5 and 6 in response to a preliminary ruling from the Latvian Regional Administrative Court concerning a… CJEU ·Fifth Chamber Feb 24, 2022 Retention Period Personal Data Legitimate Interest
15625/2026 Cass.Civ. - 15625/2026 Istituto nazionale della previdenza sociale (INPS, the controller) is the Italian National Institute for Social Security. In 2021, the DPA fined the controller €300,000 for its… Supreme Court May 21, 2026 Privacy by Design & Default Privacy by Design DPIA