ENISA Data Protection Engineering - From Theory to Practice
ENISA DPE - Anonymisation and Pseudonymisation

ENISA Data Protection Engineering - From Theory to Practice ENISA-DPE-3.1: Anonymisation

Anonymisation removes all means reasonably likely to be used to identify a natural person from a dataset; if successful the data is outside GDPR scope. The report surveys the main anonymisation models including k-anonymity, l-diversity and t-closeness and warns that anonymisation must be assessed against motivated-intruder and re-identification attacks.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

GDPR · 1 control

  • GDPR-Art.5 Principles relating to processing of personal data

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in ENISA DPE - Anonymisation and Pseudonymisation

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.