Share on LinkedInShare on LinkedIn

ARTICLE · 21 OCTOBER 2026

Privacy Corner

The European Data Protection Board has released groundbreaking guidelines on anonymisation that fundamentally reshape how organisations must assess data identifiability. These new rules introduce the concept of "relative identifiability," establish strict processor obligations, and set demanding standards for AI training data that could transform compliance practices across the EU.

European UnionPrivacy

Think your data is anonymous? The EDPB is not so sure — new guidelines explained

On 7 July 2026, the EDPB published its new draft Guidelines 02/2026 on Anonymisation. At first glance, it may look like a technical update; a refresh of the 2014 Article 29 Working Party Opinion, with new terminology and updated assessment criteria. Look more closely, and a considerably more significant shift emerges. Since the 2014 Opinion, there have been major changes in the legal, privacy, engineering and technological landscapes, including the development of CJEU case law, the establishment of EU-wide data spaces, and developments in AI and technology in general. All of which raised the need to update the previous guidance. The Guidelines are open for public consultation until 30 October 2026. They are worth reading carefully.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from