Treat it as personal data because reidentification remains: How should the dataset be treated for the agency’s
Pseudonymized data remain personal data when a key or other reasonable means can reconnect records to individuals.
The question
Under the GDPR in the EEA, a public-benefit agency removes names from a dataset but retains a separately held reidentification key. How should the dataset be treated for the agency’s model development?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Treat it as anonymous unless the model outputs identities.Classification depends on identifiability of the dataset, not on whether the model later produces an identity disclosure.
- Treat it as personal data because reidentification remains possible. ✓Pseudonymization reduces direct identification but retains a link, so the agency must continue treating the information as personal data.
- Treat it as anonymous because names were removed.Removing direct identifiers alone does not establish anonymization when a key or other means can reconnect records to people.
- Treat it as nonpersonal because the key is stored separately.Separate storage can reduce access risk, but it does not eliminate the possibility of reidentification or GDPR applicability.
The trap
Ask whether a person can still be identified using retained keys or reasonably available means. How to remember it
Pseudonymized data remain personal data when a key or other reasonable means can reconnect records to individuals.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Collect only age band and region: Which action best applies minimization? →
- Classify the provider as controller for its own analytics: Which role best describes that separate activity? →
- Require an Article 28 processor arrangement: What procurement decision best addresses the evidence? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.