Expert Advice Community

Guest

Existence of data processing

  Quote
Guest
Guest user Created:   Sep 26, 2022 Last commented:   Sep 30, 2022

Existence of data processing

Our company, to provide access to a digital editorial publication, holds a list of usernames provided by a third party, which does not correspond to any name or other personal identifier. However, some of these usernames are completely anonymous, while others contain email addresses inside.
The question is: does having a list of email addresses without any correspondence with a name and surname constitute processing / storage of personal data?
Thanks for the clarification

0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Tudor Galos Sep 30, 2022

According to the definition in Article 4 GDPR – Definitions,  "personal data" means any information relating to an identified or identifiable natural person. The usernames, although some of them are emails and some of them are not, they do lead to the identification of natural persons. They are considered pseudonymized personal data. According to the definition in the same Article 4 GDPR, "pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

So storing this list of usernames is considered processing of personal data, also according to the definition in Article 4 GDPR, where ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data.

Please also consult these links:

Tudor Galos
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Sep 26, 2022

Sep 30, 2022

Suggested Topics

Guest user Created:   Jan 29, 2020 EU GDPR
Replies: 1
0 0

Joint responsibility

Guest user Created:   Feb 23, 2023 EU GDPR
Replies: 1
0 0

Data privacy question