Recital 27b
Also numbered 27bITRE–LIBE amendments 228 and 229 (CJ72-AM-786820, pages 152–154) propose a different recital 27b. The tracker keeps it as a separate provision: Recital 27b (new). The Council texts of 3 September, 2 October and 22 October 2026 print a different recital 27b. The tracker keeps it as a separate provision: Recital 27b.
Changes since10 June 2026ST 10426/26, Recital 27b
Same wording as in the Council text of 10 June 2026. Every text of this provision
Text as printed
Same wording since 21 May · Changes since the Commission proposal
Pseudonymisation is one of the possible security measures within the meaning of Article 32 of Regulation (EU) 2016/679 and does not necessarily have to be applied in all cases. Whether pseudonymisation is appropriate, should be assessed on a case-bycase basis and depends on the context, the nature of the personal data and the existence of other appropriate technical and organisational measures. The effective application of pseudonymisation may also be clarified for controllers and processors through the approval of specific codes of conduct in accordance with Article 40 of Regulation (EU) 2016/679, taking account of the specific characteristics of the processing carried out in certain sectors and the specific needs of micro, small and medium enterprises.