The Court of Justice of the European Union (CJEU) ruled that pseudonymized data does not always qualify as personal data under the GDPR. The decision emphasizes that, depending on the context, pseudonymization can prevent third parties from identifying data subjects, meaning GDPR rules may not apply in such cases. However, data controllers remain responsible for informing data subjects about processing and any data sharing, even if re-identification by recipients isn’t possib