Article 12
Anonymization of Personal Data
Anonymised data shall not be considered personal data for the purposes of this Law, except when the anonymization process to which it was submitted is reversed, using its own means, or when, with reasonable efforts, it may be reversed.
- 1. The determination of what is reasonable must take into account objective factors, such as cost and time required to reverse the anonymization process, according to available technologies, and the exclusive use of own resources.
- 2. For the purposes of this Law, data may also be considered as personal if used to form the behavioral profile of a particular natural person, if she is possible to be identified.
- 3. The national authority may dispose of standards and techniques used in anonymization processes and carry out checks on their security, after consultation with the National Council for the Protection of Personal Data.