Data Pseudonymization

The processing of personal data so that it can no longer be attributed to a specific individual without additional information, which is kept separately and securely.

Replacing identifying information with fake IDs, but keeping a secret key that can link them back if needed. Like assigning everyone a random number; more useful than full anonymization, but not as private.

Pseudonymisation is recognised under GDPR and other privacy frameworks as a valid data protection measure. Your AI governance framework should define when pseudonymisation is appropriate and what safeguards are required for the linking keys.