Processing that irreversibly removes the ability to identify a data subject, placing the data outside GDPR scope under Recital 26. Distinct from pseudonymisation, which retains identifiability via a separately held key and stays inside GDPR scope. Confusion between the two is one of the highest-volume search patterns in this category.