News · IAPP EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

AEPD issues guidance for anonymization

Anonymization Controllers Accountability GDPR Article 5 Principles of Processing Personal Data Processing Data Controller Identification
Feb 24, 2023 Source
Summary

> Spain’s data protection authority, the Agencia Española de Protección de Datos, published guidance for anonymizing data. The guidance called for a trained professional to handle the anonymization of a personal data set who also has experience in reidentification attacks. Even though “residual probability” of reidentification will always exist, a data controller must apply accountability to the anonymization process “with appropriate measures to ensure compliance taking i

How it connects

Related across sources

Guidance Guidelines 9/2022 on personal data breach notification under GDPR EDPB Guidance Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search engines cases under the GDPR (part 1) EDPB Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Case Law VB v Natsionalna agentsia za prihodite CJEU Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement EDPB

Full text

Spain’s data protection authority, the Agencia Española de Protección de Datos, published guidance for anonymizing data. The guidance called for a trained professional to handle the anonymization of a personal data set who also has experience in reidentification attacks. Even though “residual probability” of reidentification will always exist, a data controller must apply accountability to the anonymization process “with appropriate measures to ensure compliance taking into account the nature, context, scope, purposes and risks to rights and freedoms” of the data being reidentified.
Full Story

Original document at the source iapp.org

Similar Content