What if I process pseudonymised personal data – personal data that does not identify the data subject? #GDPR

If you process s pseudonymised personal data – personal data that does not identify the data subject but where the data subject could be identified later when the information is matched up with other information – you are still obliged to process this in accordance with the data protection principles, and to ensure the security of this data. However, you are not required to acquire or process additional information in order to identify the data subject and the data subject does not have most of the rights to access or rectify data etc.

View our GDPR page for more information