CIPP/US Study Guide
Chapter 1: Introduction to Privacy

Nonpersonal, Deidentified, and Pseudonymized Information

Remove identifying elements and data becomes nonpersonal (deidentified/anonymized), generally outside privacy laws. Pseudonymized data is only temporarily nonpersonal because it can be reversed to reidentify individuals.

If the data elements used to identify an individual are removed, the remaining data becomes nonpersonal information, and privacy laws generally do not apply. Related terms are 'deidentified' or 'anonymized.'

Pseudonymized data retains information under pseudonyms (such as a unique numerical code), rendering it temporarily nonpersonal but reversible. Reversibility can matter - for example, in a drug trial where the medicine is later found to have adverse side effects.

Anonymized vs. pseudonymized

Anonymized/deidentified data has identifiers removed and is generally outside privacy law. Pseudonymized data is only temporarily nonpersonal - it can be reversed to reidentify the individual.

Key terms - quick answers

What is “Nonpersonal information”?
Data from which identifying elements have been removed (deidentified or anonymized), to which privacy and data protection laws generally do not apply.
What is “Pseudonymized data”?
Data retained under pseudonyms (e.g., a unique numerical code) that is temporarily nonpersonal but reversible, allowing reidentification.