Run a realistic reidentification test: What evidence should resolve whether the data are anonymized?
A retained key and vendor linkage mean pseudonymization may remain; realistic reidentification evidence is decisive.
The question
An EU employer subject to the GDPR uses an employee-assistance model. Names are replaced with codes, but HR retains the reidentification key and the vendor can link outputs to employee cases. What evidence should resolve whether the data are anonymized?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Obtain the vendor's statement that names were removed.Removing direct identifiers does not establish anonymization when another party can link records or retain reidentification capability.
- Review encryption records for the coded files.Encryption addresses security but does not determine whether individuals remain identifiable through the key or available information.
- Classify the coded records as anonymous in an internal policy.An internal classification cannot override the factual ability of HR or the vendor to identify employees.
- Run a realistic reidentification test. ✓A realistic reidentification test helps determine whether available information, the retained key, and vendor linkage leave employees identifiable.
The trap
Retained keys and linkage capability require a realistic identifiability analysis; removing names alone is insufficient. How to remember it
A retained key and vendor linkage mean pseudonymization may remain; realistic reidentification evidence is decisive.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Define the minimum fields needed for invoice matching: What evidence should resolve approval? →
- Document each party’s purposes and means: What evidence should resolve the parties’ roles? →
- Verify Article 28 terms for instructions: Which evidence should be verified before approval? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.