Which type of data falls outside the scope of the General Data Protection Regulation?
GDPR Recital 26 provides that the Regulation does not apply to anonymous information, including personal data anonymized so that the data subject is no longer identifiable. Pseudonymization, encryption, and masking can preserve the ability to identify or re-identify a person and therefore do not by themselves take data outside GDPR scope.
Community Discussion