CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ2

European Data Protection: Scope and Accountability

Which type of data falls outside the scope of the General Data Protection Regulation?

  • A Pseudonymized
  • B Anonymized
  • C Encrypted
  • D Masked
Explanation

GDPR Recital 26 provides that the Regulation does not apply to anonymous information, including personal data anonymized so that the data subject is no longer identifiable. Pseudonymization, encryption, and masking can preserve the ability to identify or re-identify a person and therefore do not by themselves take data outside GDPR scope.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!