In order to prevent the American authorities from accessing data in the Cloud, the EDPS proposes 2 technical measures: pseudonymization and encryption, but specifies with regard to encryption that data importers must not come into possession of the encryption/decryption keys. However, these keys are necessary to benefit from the bulk of their managed services.
Read MoreAnonymization is the only treatment that allows data to fall outside the scope of the RGPD. However, it is the source of many errors and misunderstandings, mainly due to a lack of awareness of the so-called re-identification risks, but also, to ignorance of the regulatory measures framing this processing of personal data. Anonymization removes
Read MoreAnonymization is the only method for removing data from the scope of the RGPD. However, unlike pseudonymization, it must be irreversible. Unfortunately, this notion of irreversibility is a source of frequent confusion between anonymization and pseudonymization, and can expose data controllers to significant penalties. On this subject, the G29 (Group of European Data Protection Authorities) has published...
Read MoreSince the RGPD came into force in May 2018, data anonymization has become unavoidable for a large number of personal data processing operations. Indeed, the principles of the RGPD restrict, and sometimes prohibit, the use of personal data in several scenarios including: using data beyond the legal retention period, or sending data to partners located in non-EU zones.
Read More
