DATA PROTECTION | EDPB issues Guidelines on pseudonymization techniques

On 16 January 2025, the European Data Protection Board (“EDPB”) released the Guidelines 1/2025 on Pseudonymisation (“Guidelines”), aiming to provide clarity on the proper and effective implementation of pseudonymisation techniques in the processing of personal data. The Guidelines, which are currently undergoing a public consultation process, provide a comprehensive explanation of what constitutes pseudonymisation under the GDPR while outlining how data controllers and processors can effectively implement these techniques to enhance data protection by design and by default. Additionally, the Guidelines emphasize key technical measures and safeguards required to properly structure and manage the pseudonymisation process within an organisation’s operations. They also include practical examples that illustrate how pseudonymisation can minimise threats to personal data in real-file situations.

Newsletter n. 104 – February 2025