Skip to content
compliancebase

Pseudonymization

Processing personal data so it cannot be attributed to a person without separately kept additional information.

In practice

Separate mapping keys, restrict access, and use pseudonymous identifiers in analytics and lower environments.

Common confusion

Pseudonymized information remains personal data under GDPR.

Related controls

Framework versions referenced in this page:

Last verified: August 2026 · Primary sources linked above