PECB Exam GDPR Topic 1 Question 5 Discussion

Actual exam question for PECB's GDPR exam

Question #: 5
Topic #: 1

[All GDPR Questions]

Which statement below regarding the difference between anonymization and pseudonymization is correct?

AAnonymization is reversible and the original data can be retrieved with the use of a public key encryption, while pseudonymization is not reversible and can be used only for non-identifiable data, such as gender, nationality, and occupation

BAnonymization is not reversible and the original data cannot be attributed to an individual, while pseudonymization is reversible and the original data can be attributed to an individual with the use of additional information

CAnonymization is the process of replacing a portion of the data with a common value to keep the identity of individuals anonymous, whereas pseudonymization is the process of adding mathematical noise to the data

Show Suggested Answer

Suggested Answer: B

According to GDPR Recital 26, anonymization permanently removes any possibility of re-identification, making it irreversible. Pseudonymization, as defined in Article 4(5), is reversible if the correct key or additional information is available. Pseudonymization still qualifies as personal data under GDPR, whereas anonymized data falls outside the scope of GDPR.

by Carmela at Mar 20, 2025, 07:48 AM

Limited Time Offer

25%

Off

Get Premium GDPR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nana

5 days ago

This is a tricky one, but I'm leaning towards B. Anonymization is about making data unidentifiable, while pseudonymization is about replacing identifiers in a way that can be traced back. Just don't ask me to explain it in plain English!

upvoted 0 times

...

Emogene

8 days ago

I'm torn between A and B, but I'll have to go with B. Anonymization is irreversible, while pseudonymization is reversible with additional info. Gotta love those data privacy terms!

upvoted 0 times

...

Noel

11 days ago

I think C is the way to go. Anonymization is about replacing data, while pseudonymization is about adding noise to obscure the original data. Simple enough, right?

upvoted 0 times

...

Brandon

12 days ago

Hmm, I'm pretty sure B is the correct answer. Anonymization makes the data completely unidentifiable, while pseudonymization just replaces identifiers with a code that can be traced back to the original data.

upvoted 0 times

...