The European Data Protection Board has launched a public consultation concerning anonymisation. The guidelines clarify the concept of anonymous data and provide a practical framework for determining whether data has been successfully anonymised.

The framework can be applied in two different ways: one considers the differences in capabilities between those who might identify the data subject (“the contextual approach”), while the other does not (“the simplified approach”). The framework itself presents three criteria that can be used to test whether data is anonymous: no record isolation, no linkage and no inference. These criteria should be used to evaluate the effectiveness of potential re-identification techniques. Different examples are included in the guidelines to facilitate the comprehension of the document itself.

Notably, the guidelines include legal and technical analyses, concluding with a flowchart for the technical analysis of anonymity. This flowchart is intended to support organisations that wish to anonymise data.

To learn more about and provide your input follow this link: Guidelines 02/2026 on Anonymisation | European Data Protection Board.

Comments are welcomed until 30 October 2026.