Recital 29
EU GDPR

(29) In order to create incentives to apply pseudonymisation when processing personal data, measures of pseudonymisation should, whilst allowing general analysis, be possible within the same controller when that controller has taken technical and organisational measures necessary to ensure, for the processing concerned, that this Regulation is implemented, and that additional information for attributing the personal data to a specific data subject is kept separately.

The controller processing the personal data should indicate the authorised persons within the same controller.
Article: 4

The DPO Centre is a leading provider of Outsourced Data Protection Officer, EU Representation and Consultancy services. If your organisation needs advice about any aspect of Data Protection or Privacy, then please

 

Contact Us