Pseudonymization
Processing personal data so that it can no longer be attributed to a specific person without additional information that is kept separately under technical and organizational controls (GDPR Article 4(5)). For anyone who can reattribute it, pseudonymized data is still personal data.
Covered in
Tokenization, pseudonymization and privacy transformations: choose deliberately
Choose between vault tokens, keyed pseudonyms, format-preserving encryption, aggregation and differential privacy by the joins, reversibility and leakage each allows, and test re-identification on the data you release.
GDPR privacy by design for engineers: Articles 25, 32 and 35 in code
Turn GDPR data protection by design and by default, security of processing and DPIA triggers into engineering work: a personal-data inventory checked in CI, defaults that collect and share less, a DPIA screen at design time, and access and erasure requests that reach every store.