What is considered a personal data processing for the General Data Protection Regulation (GDPR)?

What is considered a personal data processing for the General Data Protection Regulation (GDPR)?
A . Analysis of data regarding the cause of death in the last 10 years.
B . Creating a backup with records of names, addresses, enrollment of students.
C . Conducting analysis of personal data related to health issues, but which have previously been anonymized.
D . Statistical publication with intention to vote, help anonymously.

View Answer

Answer: B

Explanation:

Anonymized data is not under the scope of the GDPR, nor are data from deceased persons. Organizations that handle only this type of data do not need to conform to the GDPR.

Anonymized data reads data that is not possible to reverse in order to identify the data subject. There is also pseudonymized data, in which case it is possible to perform the reversal and identify the data holder.