graphgrc

SCF - IAC-09.6 - Pairwise Pseudonymous Identifiers (PPID)

Mechanisms exist to generate pairwise pseudonymous identifiers with no identifying information about a data subject to discourage activity tracking and profiling of the data subject.

Mapped framework controls

GDPR

Control questions

Does the organization generate pairwise pseudonymous identifiers with no identifying information about a data subject to discourage activity tracking and profiling of the data subject?