Anonymization is the process of irreversibly transforming personal data so that the data subject can no longer be identified, by any means.
Once anonymized, the data falls outside the scope of the GDPR.
It must be distinguished from pseudonymization, which is reversible.
See our expertise in personal data protection law.
