Question 20
UnclassifiedWhich statement best captures the difference between anonymized and merely pseudonymized data?
Correct answer: B
Explanation
Anonymized data is processed so the person can no longer be identified, because it aims to prevent reidentification. Pseudonymized data still “relates to a person through additional information,” meaning it can be linked back if the extra information is available.
Why each option is right or wrong
A. Pseudonymized data can never be relinked to a person
B. Anonymized data aims to prevent reidentification; pseudonymized data still relates to a person through additional information
Under GDPR Article 4(1), personal data is any information relating to an identified or identifiable natural person, and Recital 26 draws the line by asking whether identification is reasonably likely using means “reasonably likely to be used.” Pseudonymization is defined in Article 4(5) as processing so data can no longer be attributed to a specific person without additional information kept separately, so it remains linkable if that extra key exists; anonymization, by contrast, removes that realistic reidentification link altogether.
C. They are identical terms in all U.S. laws
D. Only pseudonymized data can be used for analytics