True anonymization is a one-way door. Once done, the data is outside the scope of most privacy law because it no longer relates to an identifiable person. That also means you cannot honor a deletion request against it, and you cannot re-join it to a profile later. Deciding what to anonymize is therefore a product decision, not just a compliance one.
More in Privacy
- CCPACalifornia privacy law giving residents the right to know what is collected about them, to delete it, and to opt out of its sale.
- Consent managementRecording what each user agreed to and enforcing it at collection, so consent is a property of the pipeline rather than a banner.
- Data minimizationCollecting only what a stated purpose needs. The cheapest way to reduce risk is not to hold the data at all.
- Data residencyThe requirement that data physically stays in a given jurisdiction. On Flex you pick the region; on Enterprise it is wherever you deploy.
- Data sovereigntyThe principle that data is subject to the laws of the country it sits in, and that you, not a vendor, decide which country that is.
- GDPREU regulation governing personal data, covering the lawful basis for collection, rights to access and erasure, and real consequences for ignoring both.