What is anonymised data in GDPR?

Anonymised data is information that no longer relates to an identifiable person. Under Recital 26 of the GDPR, identification must be assessed using the methods reasonably likely to be used, considering available technology, time and cost. Truly anonymous information falls outside the GDPR.

Removing names or replacing them with codes does not automatically anonymise a dataset. If additional information can reasonably identify someone, the information remains personal data. Pseudonymisation reduces identification risks but does not, by itself, make data anonymous. The process of anonymising personal data must still comply with the GDPR.