HumenhukCIPP/US Study Guide
Chapter 1: Introduction to Privacy

Nonpersonal, Deidentified, and Pseudonymized Information

Reviewed by Victor Humenhuk. Published . Reviewed .

Remove identifying elements and data becomes nonpersonal (deidentified/anonymized), generally outside privacy laws. Pseudonymized data is only temporarily nonpersonal because it can be reversed to reidentify individuals.

How this supports CIPP/US study

Use this lesson to identify the legal source, actor, data and activity before applying a rule to a scenario. Continue with the CIPP/US exam format and blueprint.

If the data elements used to identify an individual are removed, the remaining data becomes nonpersonal information, and privacy laws generally do not apply. Related terms are 'deidentified' or 'anonymized.'

Pseudonymized data retains information under pseudonyms (such as a unique numerical code), rendering it temporarily nonpersonal but reversible. Reversibility can matter - for example, in a drug trial where the medicine is later found to have adverse side effects.

Anonymized vs. pseudonymized

Anonymized/deidentified data has identifiers removed and is generally outside privacy law. Pseudonymized data is only temporarily nonpersonal - it can be reversed to reidentify the individual.

Key terms - quick answers

What is “Nonpersonal information”?
Data from which identifying elements have been removed (deidentified or anonymized), to which privacy and data protection laws generally do not apply.
What is “Pseudonymized data”?
Data retained under pseudonyms (e.g., a unique numerical code) that is temporarily nonpersonal but reversible, allowing reidentification.

Sources and study method

This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.