ARTICLE · 17 FEBRUARY 2026

GG Thinks: The 2026 GDPR Shift: How Pseudonymization Could Recalibrate Data Use And Compliance Risk

Gama Glória

Explore more from Gama Glória

Personal data regulation is a familiar constraint. Both EU and non-EU companies struggle to comply with the General Data Protection Regulation (GDPR), which applies whenever data can be linked to an identifiable individual.

PortugalPrivacy

Rafael Martins Aguiar

Author LinkedIn connections

Personal data regulation is a familiar constraint. Both EU and non-EU companies struggle to  comply with  the General Data Protection Regulation (GDPR), which applies whenever data can be linked to an identifiable individual.  From internal governance procedures to  privacy policies and data processing agreements, the path to compliance is cumbersome and complex, even when planned in advance. 

One of the main techniques used to manage this risk is pseudonymization: replacing direct identifiers (such as names or identification numbers) with artificial codes or aliases, so that data remains usable for analysis, research, and innovation while access to individual identities is deliberately restricted and segregated. 

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Guidelines For The Protection Of Minors Under The Digital Services Act

PortugalPrivacy

Data Governance: Decree-Law 2/2025 Of 23 January

PortugalPrivacy

The Free Flow Of Non-Personal Data

PortugalPrivacy

APD Guidelines For Reporting Cybersecurity Accidents And Incidents

PortugalPrivacy

Data Privacy Comparative Guide

PortugalPrivacy

Rato & Cortés, Sociedade de Advogados, SP, RL

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

PrivacyGama Glória

New CNPD Guidelines On Direct Marketing Electronic Communications

This year's first guidelines from the Portuguese Data Protection Supervisory Authority ("CNPD") are on direct marketing electronic communications (Guidelines/2022/1).

PortugalPrivacy

Global Advertising Lawyers Alliance (GALA)

European Law On Cookies - Portugal

DLA Piper has published a new guide that summarises the varying approaches of the law on cookies across Europe.

PortugalPrivacy

DLA Piper - Ireland

Guidelines For The Protection Of Minors Under The Digital Services Act

On 13 May 2025, the European Commission submitted draft guidelines on the protection of minors online[1] under the Digital Services Act (DSA)...

PortugalPrivacy

New Fine For Unsolicited Marketing Messages By Portuguese Data Protection Authority

The Portuguese National Data Protection Commission (CNPD) imposed a fine of 107 thousand euros on Deco Proteste Editores, Lda for sending unsolicited emails for direct marketing.

PortugalPrivacy

Global Advertising Lawyers Alliance (GALA)

Data Governance: Decree-Law 2/2025 Of 23 January

In turn, Decree-Law 2/2025, which we will analyse here, establishes a set of basic provisions for the effective implementation of Regulation (EU) 2022/868 in Portugal. It is applicable to events that take place.

PortugalPrivacy

Data Privacy Comparative Guide

Data Privacy Comparative Guide for the jurisdiction of Portugal, check out our comparative guides section to compare across multiple countries

PortugalPrivacy

Rato & Cortés, Sociedade de Advogados, SP, RL

Note On The European Commission's Adequacy Decision In Relation To The EU-US Privacy Shield

The European Commission's adequacy decision in relation to the new rules on transfer to the United States of the data of data subjects who are citizens of the European Union.

APD Guidelines For Reporting Cybersecurity Accidents And Incidents

In this Circular, the APD instructs public and private entities that process personal data to "scrupulously" comply with the rules contained in (i) the Law on the Protection of Personal Data...

PortugalPrivacy

Telework Remote Control And Monitoring Of Employees' Health Data

The Portuguese Data Protection Authority (CNPD) has recently issued guidelines on the rules regarding remote control of employees on telework, and on the possibility of companies directly monitoring

PortugalPrivacy

CNPD Approves Guidelines On Security Measures

According to the CNPD, the majority of the most frequent attacks affect personal data and result in data breaches that require the application of the provisions of the General Data Protection...

PortugalPrivacy

GG Thinks: Portugal's Tax Blacklist Is Still Out Of Balance

Portugal's recent Ordinance 292/2025/1 (Portaria) removes Hong Kong, Liechtenstein, and Uruguay from the list of "jurisdictions with clearly more favorable tax regimes."

The Pay Transparency Directive Is Coming, And There Is Time To Prepare.

Portugal's upcoming transposition of the EU Pay Transparency Directive will require companies with over 100 employees to disclose salary ranges, justify pay gaps exceeding 5%, and shift the burden of proof to employers in discrimination disputes. Drawing on the counterintuitive success of radical transparency at Brazilian manufacturer Semco, this analysis examines what Portuguese employers must prepare for as the June 2026 deadline approaches.

PortugalEmployment and HR

"Blackouts, Transition And The Nuclear Taboo," By Tiago Aires Mateus.

Global electricity generation to power data centers is expected to grow by more than 280% by 2035. Natural gas and coal are projected to supply over 40% of the additional...

GlobalEnergy and Natural Resources

André Júdice Glória Reflects On The AI Revolution, And The Future Of The Legal Industry

I recently participated in a private peer-to-peer roundtable discussion with four colleagues - local legal leaders – and we spent some time envisioning various aspects of the future of our industry.

PortugalTechnology

GG Thinks: Pay Transparency Directive: Can You Explain Why You Pay What You Pay?

Forty years ago, the CEO of a Brazilian manufacturer, Semco, opened the company’s books and discovered that, in this case, full financial transparency produced better decisions and higher revenue. What Ricardo Semler did voluntarily at Semco, the EU Pay Transparency Directive now requires — in a considerably narrower form — of every employer in Europe.

PortugalEmployment and HR

GG Thinks: Liquidation Preferences: Scenes From A Marriage With Portuguese Law

In venture capital transactions, liquidation preferences determine how proceeds are distributed between investors and founders during exits or liquidations. This analysis examines how these common-law mechanisms operate within Portugal's more formalistic corporate law framework, exploring the structural and interpretive challenges that arise when embedding such clauses in bylaws versus shareholder agreements across different liquidity scenarios.

PortugalCorporate/Commercial Law

GG Thinks: The Tax Reform Fintechs Cannot Afford To Ignore

European financial sector tax reform is imminent, with the European Parliament and Commission acknowledging that current VAT exemption rules from the 1970s no longer reflect modern fintech business models. Leaders of digital banks, payment companies, and financial platforms face a critical window to influence policy outcomes that will fundamentally reshape their tax obligations and competitive positioning.

GG Thinks: Portugal's IP Box Is A Strategic Tax Opportunity For Tech Companies

Portugal has gained increasing recognition as a hub for innovative businesses and a vibrant tech ecosystem.

GG Thinks: Diretiva Da Transparência Salarial: Consegue Explicar Por Que Paga O Que Paga?

À primeira vista, a exigência da Diretiva parece modesta: os empregadores devem ser capazes de explicar por que pagam o que pagam. No entanto, para muitas organizações, esta pergunta revelar-se-á mais difícil do que se esperaria.

PortugalEmployment and HR

GG Thinks: We Can Still Prevent A Crisis Of Subprime Thinking

If we acknowledge that large language models could bring about an age of poor-quality analysis and reasoning in the field of law, then we can still protect ourselves.

PortugalFinance and Banking