EU Court Clarifies: Pseudonymized Data May Not Always Be Personal Data

The Court of Justice of the European Union (CJEU) ruled that pseudonymized data does not always qualify as personal data under the GDPR. The decision emphasizes that, depending on the context, pseudonymization can prevent third parties from identifying data subjects, meaning GDPR rules may not apply in such cases. However, data controllers remain responsible for informing data subjects about processing and any data sharing, even if re-identification by recipients isn’t possible. This ruling could accelerate AI model training and other tech developments in Europe while still safeguarding individuals’ rights.

Check SNS for more: https://www.spms.min-saude.pt/2025/09/rgpd-i-dados-pseudonimizados-podem-nao-ser-considerados-dados-pessoais/

#GDPR #DataPrivacy #Pseudonymization