An interesting question continues to be whether encrypted personal data is still “personal data” for purposes of the European Union’s General Data Protection Regulation (GDPR), thereby making the processing of such data subject to the GDPR’s extensive compliance obligations. The answer largely hinges on the precise meaning and implications of encryption. Simply asserting that encrypted data is “anonymized” is insufficient and inaccurate for concluding…
Read More