A Practice Note providing an overview of anonymization and pseudonymization under the EU General Data Protection Regulation (GDPR). This Note provides an overview of the requirements for anonymizing or pseudonymizing personal data, the techniques organizations may use to anonymize or pseudonymize personal data, how using pseudonymization may help organizations demonstrate compliance with certain GDPR requirements, and the benefits under the GDPR for organizations that use pseudonymization.