The processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

This technical measure is also recommended and mentioned in Art. 32 GDPR as an important technical measure that all controllers should consider.