It's all 'relative': Genomic data and the EDPB's draft anonymization guidelines
The European Data Protection Board has released draft guidelines on anonymization, with particular attention to genomic data and the challenges of treating it as truly anonymous. The guidelines grapple with the relative nature of anonymization, which depends heavily on context and the capabilities of whoever might attempt re-identification.
Why this matters: Genomic data is about as personal as data gets. It identifies not just you but your relatives, your health risks, and your ancestry. The EDPB's core insight here is that 'anonymous' is not a fixed label you apply once and move on. It depends on who has the data, what tools exist, and what other data they can combine it with. That matters for anyone whose genetic information sits in a database somewhere, which is more people than realize it. If regulators get this wrong, companies can launder sensitive data as anonymous and face no accountability when someone gets hurt.
Who should care: Lawyers · Privacy officers · AI governance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.