GDPR

6.1. What is the right to be forgotten?

The right to be forgotten means that someone may ask to have their information removed from certain data repositories. This sounds simple, but it is fraught with technical difficulties if not logical contradictions. A business may be required by one law to remove data and required by another law to retain data.

You can read more about the right to be forgotten as illustrated by the fictional George Bailey and the real Barbra Streisand.

6.2. What is Pseudonymization?

Many people have defined pseudonymization in varying ways, but the clearest definition may be reversible de-identification. That is, identifiers have been replaced with substitutes, and someone knows how to recover the original data from these replacements. The information has not been permanently anonymized. That’s one way the term is used, but unfortunately there are others. See this page for a discussion.

6.3. What is anonymization?

Anonymization and de-identification mean essentially the same thing. They may mean exactly the same thing, or there may be subtle differences, depending on whose definition you’re going by.

 

LET’S TALK

Trusted consultants to some of the world’s leading companies

Amazon, Facebook, Google, US Army Corp of Engineers, Amgen, Microsoft, Hitachi Data Systems