Ace of Inference
You have found a new place where you can replace personal data with a random identifier.
|
Threat |
|
|
|
A customer has withdrawn consent for the processing of a subset of their data or for processing it in a certain way. You decided to keep the data and performed some anonymization on it, however, because of some shared characteristics/features in your datasets, it turns out it is only pseudonymized and it is possible to infer information the user chose not to reveal when withdrawing their consent. |
|
GDPR |
Chapter 2, Art. 7 – 3. |
|
CCPA & CPRA |
CCPA 1798.121. Consumers’ Right to Limit Use and Disclosure of Sensitive Personal Information |
|
OECD |
N/A |
