Recital 29

In order to create incentives to apply pseudonymisation when processing personal data, measures of pseudonymisation should, whilst allowing general analysis, be possible within the same controller when that controller has taken technical and organisational measures necessary to ensure, for the processing concerned, that this Regulation is implemented, and that additional information for attributing the personal data to a specific data subject is kept separately. The controller processing the personal data should indicate the authorised persons within the same controller.

This recital of the General Data Protection Regulation clarifies article 4 GDPR (Definitions).*

* The reference between articles and recitals is based on the professional assessment of activeMind.legal.

Articles of the GDPR

CHAPTER X – Delegated acts and implementing acts (Art. 92 – 93)