Pseudonymisation
Pseudonymisation replaces directly identifying details with a consistent artificial identifier, so the same person's records can still be linked together without exposing their real identity directly.
Prerequisite: Anonymisation
What matters
Unlike true anonymisation, pseudonymised data can typically still be traced back to the real individual using a separately held key, so it reduces but does not eliminate privacy risk.
Example
Replacing a patient's name with a code like 'patient-4471' across medical records is pseudonymisation, since a separately kept key can still map the code back to the real person.
Common misconception
Pseudonymised data is not the same as anonymised data; pseudonymisation is reversible with the right key, while true anonymisation is meant to not be reversible at all.
Recall question
Why is pseudonymised data considered less protective than truly anonymised data?