Handreiking pseudonimisering European Data Protection Board

Handreiking pseudonimisering European Data Protection Board

Pseudonymised data, which could be attributed to an individual by the use of additional information, remains information related to an identifiable natural person and is therefore still 'personal data'. Indeed, if the data can be linked back to an individual by anyone, it remains personal data.
Having said that, pseudonymisation can reduce risks and make it easier to use 'legitimate interests' as a legal basis, as long as all other GDPR requirements are met.