The process that causes data to irreversibly lose the possibility of being associated with a person.
Anonymization is the use of reasonable and available technical means at the time of processing, through which data loses the possibility of direct or indirect association with an individual.
Anonymized data ceases to be personal data and falls outside the scope of the LGPD (Brazilian General Data Protection Law). Therefore, the bar is high: if the process can be reversed with reasonable effort, or if the data combined with other data allows for the re-identification of the person, then there has been no anonymization, but rather... pseudonymization.
Article 5, XI, of LGPD Anonymization is defined, and Article 12 establishes that anonymized data is not considered personal data, except when the process is reversed using exclusively its own means, or when it can be reversed with reasonable effort. The ANPD (National Data Protection Authority) may establish standards and techniques for anonymization (Article 12, § 3). Anonymization is also a right of the data subject (Article 18, IV) and one of the retention measures provided for in Article 16.
O Data discovery locates personal data in databases and files and supports the redaction (masking) of information; the Data Mapping It records activities that use anonymized or pseudonymized data and the retention periods.
Pseudonymization · Personal data · Data minimization · Sensitive personal data · Back to glossary
Updated .
Request a demo and see how... Privacy Tools It organizes mapping, legal bases, rights holder applications, and evidence all in one place.
