Anonymization as a data protection technique is best described as?

• A. Replacing data with pseudo-identifiers
• B. Masking all data fields
• C. Encrypting data at rest
• D. Removing identifiers so data cannot be linked to individuals

Answer: (D)

Anonymization means removing personal identifiers so the data cannot be linked back to any individual, ideally in an irreversible way so re-identification isn’t feasible even with additional information. That’s why removing identifiers so the data cannot be linked to individuals is the best description.

Replacing data with pseudo-identifiers is pseudonymization: the link to the person exists in a separate mapping, so re-identification is possible. Masking all data fields is a masking technique that hides content but doesn’t inherently guarantee unlinkability or irreversibility. Encrypting data at rest protects content with a key, but the data can be recovered, so it’s not anonymization.