Definition

Processing of personal data so that it can no longer be attributed to a specific person without use of additional information kept separately (GDPR Art 4(5)).

Example

Replacing patient ID with a reversible code stored in a separate secure system.

Regulatory source

GDPR Art 4(5), GVP VI Addendum II

Common mistakes

Confusing pseudonymization with anonymization (latter is irreversible).

Inspector question

Do you use pseudonymization or anonymization for EV submissions?

Related terms