Anonymized data shall not be considered personal data, for purposes of this Law, except when the process of anonymization to which the data were submitted has been reversed, using exclusively its own efforts, or when it can be reversed applying reasonable efforts.
§1 The determination of what is considered reasonable shall take objective factors into account, such as cost and time necessary to reverse the process of anonymization, depending on the available technology, and the exclusive use of its own means.
§2 Data can be considered personal, for purposes of this Law, when they are used to formulate behavioral profiles of a particular natural person, if that person is identified.
§3 The national authority may provide for standards and techniques to be used in processes of anonymization, and carry out security checks, with opinions from the National Board for the Protection of Personal Data.
Assine nossa Newsletter gratuitamente.
