Recital 27c
Also numbered 27cITRE–LIBE amendments 230 and 231 (CJ72-AM-786820, pages 154–156) propose a different recital 27c. The tracker keeps it as a separate provision: Recital 27c (new).
Changes since3 September 2026ST 12535/26, Recital 27c
Same wording as in the Council text of 3 September 2026. Every text of this provision
Text as printed
Same wording since 3 September · Changes since the Commission proposal
The European Data Protection Board should ensure consistency and support organisations by adopting an opinion on pseudonymisation and anonymisation, assessing and specifying the state of the art of available techniques, as well as the technical and organisational measures and criteria to apply pseudonymisation and anonymisation to personal data effectively and by clarifying circumstances whether and when the application of pseudonymisation to personal data may effectively prevent persons other than the controller from identifying the data subject in such a way that, for them, the data subject is not or is no longer identifiable. The opinion should also address the processing to be undertaken and other measures to be applied in order to effectively render personal data anonymous. It is important that the Board carries out a public consultation with relevant stakeholders prior to issuing its opinion. While controllers remain fully responsible to determine and demonstrate whether pseudonymised data do not lead to re-identification of data subjects by persons other than the controller, the opinion should support and provide guidance to organisations regarding the effective application of pseudonymisation to personal data.