<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>Today, social media, information management systems and smart devices are just a few examples of technologies that process large amounts of data every day. Although the General Data Protection Regulation requires data controllers to ensure that technical and organisational measures are in place, the focus of the Regulation is on data processing, such as the collection, storage and processing of personal data. Given that a very large part of the data of smart devices is nowadays stored directly in the cloud, it is necessary to analyse how to store and process this data in the cloud, which most often can also identify a specific person to meet the requirements of the Regulation, or to store it directly in a form that does not have to meet some of the data protection requirements. The work focussed on the storage and processing of personal data in the cloud and analysed whether the pseudonymisation of personal data can effectively eliminate the reference to the data subject, since such an elimination would imply that the cloud can be used without restrictions as well as in accordance with the requirements of data protection. Scientific articles, legislation, guidelines and other sources were analysed. The paper describes the possibilities of pseudonymisation as such, and also provides useful insights into storing personal data in pseudonymised form.</p>
</abstract>

Today, social media, information management systems and smart devices are just a few examples of technologies that process large amounts of data every day. Although the General Data Protection Regulation requires data controllers to ensure that technical and organisational measures are in place, the focus of the Regulation is on data processing, such as the collection, storage and processing of personal data. Given that a very large part of the data of smart devices is nowadays stored directly in the cloud, it is necessary to analyse how to store and process this data in the cloud, which most often can also identify a specific person to meet the requirements of the Regulation, or to store it directly in a form that does not have to meet some of the data protection requirements. The work focussed on the storage and processing of personal data in the cloud and analysed whether the pseudonymisation of personal data can effectively eliminate the reference to the data subject, since such an elimination would imply that the cloud can be used without restrictions as well as in accordance with the requirements of data protection. Scientific articles, legislation, guidelines and other sources were analysed. The paper describes the possibilities of pseudonymisation as such, and also provides useful insights into storing personal data in pseudonymised form.

Pseudonymisation of personal data as a technical and organisational measure for using data in the cloud

Socrates. Rīga Stradiņš University Faculty of Law Electronic Scientific Journal of Law.

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Today, social media, information management systems and smart devices are just a few examples of technologies that process large amounts of data every day....

Pseudonymisation of personal data as a technical and organisational measure for using data in the cloud

Article Category: Research Article

Published Online: May 31, 2023

Page range: 42 - 48

DOI: https://doi.org/10.25143/socr.25.2023.1.42-48

Keywords
cloud, identifier, personal data, pseudonymisation, technical and organisational measures

© 2023 Žaklīna Ieviņa, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Pseudonymisation of personal data as a technical and organisational measure for using data in the cloud

Article Category: Research Article

Published Online: May 31, 2023

Page range: 42 - 48

DOI: https://doi.org/10.25143/socr.25.2023.1.42-48

Keywordscloud, identifier, personal data, pseudonymisation, technical and organisational measures

© 2023 Žaklīna Ieviņa, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Keywords
cloud, identifier, personal data, pseudonymisation, technical and organisational measures