Anonymization
Definition
The irreversible process of altering personal data so that it can never be linked back to a specific individual, even with additional data or re-identification techniques. Truly anonymized data falls outside the scope of privacy laws because it is no longer personal data.
Legal Definition
While US state privacy laws primarily use the term "de-identified data," anonymization refers to a higher standard. The CCPA excludes de-identified data and aggregate consumer information. The CPA and other laws similarly exclude de-identified data that meets specified technical and organizational safeguards.
State Laws Using This Term
Practical Example
A transportation agency publishes aggregate traffic flow data that shows the number of vehicles per hour on a highway. No individual vehicle or driver can be identified from this data, making it effectively anonymized.
Related Terms
Frequently Asked Questions
Is truly anonymous data still regulated?
No. If data is genuinely anonymous and cannot be re-identified, it falls outside the scope of state privacy laws. However, the standard for true anonymization is very high, and many "anonymized" datasets have been shown to be re-identifiable.