11 September 2025

CJEU Clarifies Concepts of Personal and Pseudonymised Data

1 min read

On 4 September 2025, the Court of Justice of the European Union released an important judgment in the case EDPS v SRB (C-413/23 P) in which it clarified the essential concept of “personal data”, specifically in the context of sharing pseudonymised data with a third-party recipient. This judgment will have far-reaching implications in practice with respect to pseudonymisation of personal data and assist controllers to comply with their transparency obligations under the EU data protection laws.

On 4 September 2025, the Court of Justice of the European Union released an important judgment in the case EDPS v SRB (C-413/23 P) in which it clarified the essential concept of “personal data”, specifically in the context of sharing pseudonymised data with a third-party recipient. This judgment will have far-reaching implications in practice with respect to pseudonymisation of personal data and assist controllers to comply with their transparency obligations under the EU data protection laws.

Please click below to read our analysis.