Anonymisation or pseudonymisation

Article 31 of Law no. 1.565 of December 3, 2024 stipulates that the data controller and the processor must take appropriate technical and organisational measures to guarantee a level of security appropriate to the risks to the rights and freedoms of individuals, including the pseudonymisation of data.

Similarly, pseudonymisation is one of the appropriate safeguards that may be put in place in the event of further processing of personal data for purposes other than those for which the data were originally collected, as well as the appropriate technical and organisational measures mentioned in the explanatory memorandum to enable the data controller to comply with the principle of data protection by default or to carry out processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes.

It therefore seems appropriate to clarify this concept, which is often confused with “anonymisation”.

To continue reading, you can download the factsheet here