Resources | Anonos

All

Blog

Customer Case Studies

Webinars

Videos

Whitepapers

Research

Analyst Reports

2024 Gartner® Hype Cycle™ for Artificial Intelligence

Analyst Reports

2024 Gartner® Hype Cycle™ for Artificial Intelligence

Get the 2024 Gartner Hype Cycle for AI report. Discover how synthetic data shapes AI development; learn about the breakthrough technologies shaping industries.

Differential Privacy: Mechanisms & Applications

Differential Privacy: Mechanisms & Applications

Discover differential privacy, its mechanisms, applications in data protection, and future trends in privacy-preserving data analysis.

Tokenization vs Pseudonymization: Key Differences

Tokenization vs Pseudonymization: Key Differences

This blog post discusses the differences between tokenization and pseudonymization, and explores the benefits and drawbacks of each.

TED Talk

TED Talk Big Data Needs Big Privacy

Data is an industry. Our data is a multi-billion dollar industry.

2024 Gartner® Hype Cycle™ for Artificial Intelligence

Analyst Reports

2024 Gartner® Hype Cycle™ for Artificial Intelligence

Get the 2024 Gartner Hype Cycle for AI report. Discover how synthetic data shapes AI development; learn about the breakthrough technologies shaping industries.

Differential Privacy: Mechanisms & Applications

Differential Privacy: Mechanisms & Applications

Discover differential privacy, its mechanisms, applications in data protection, and future trends in privacy-preserving data analysis.

Tokenization vs Pseudonymization: Key Differences

Tokenization vs Pseudonymization: Key Differences

This blog post discusses the differences between tokenization and pseudonymization, and explores the benefits and drawbacks of each.

Pseudonymization vs Anonymization for Data Protection

Pseudonymization vs Anonymization for Data Protection

Pseudonymization and anonymization are both important data protection approaches, but cater to different needs. Learn how to use each to your advantage.

Understand and Prepare for the EU AI Act to Stay Compliant

Understand and Prepare for the EU AI Act to Stay Compliant

Take the steps to prepare your business for the EU AI Act. Learn about strategies to stay compliant and avoid legal risks.

How to Mitigate LLM Privacy Risks in Fine-Tuning and RAG

How to Mitigate LLM Privacy Risks in Fine-Tuning and RAG

Protected data balances privacy and utility in LLM fine-tuning & RAG. Read this whitepaper to learn how to safeguard your sensitive data and mitigate LLM privacy concerns.

Unlocking Client Value with Data: Insights from PwC Germany on Building a Sustainable Data-to-Value Engine

Unlocking Client Value with Data: Insights from PwC Germany on Building a Sustainable Data-to-Value Engine

Watch this video to discover how one of the largest professional services firms built a robust and sustainable engine to develop data assets into insights to unlock client value.

Avoid Cross-Border Data Transfer Nightmares: The 2024 Guide to Success

Avoid Cross-Border Data Transfer Nightmares: The 2024 Guide to Success

Unlock cross-border data transfer insights: Stay compliant, retain analytical value, and fuel AI projects while moving data across jurisdictions.

A Guide to Zero Trust Data to Enhance AI

A Guide to Zero Trust Data to Enhance AI

Learn how to overcome the limitations of traditional Zero Trust Architecture models with a data-centric approach to enhance security and accelerate AI initiatives.

How to Navigate Compliance for Digital Operational Resilience Act (DORA)

How to Navigate Compliance for Digital Operational Resilience Act (DORA)

Discover how to ace DORA compliance in finance & ICT. Unpack the secrets to digital operational resilience. Click to start your compliance journey!

China Cross-Border Data Transfer: Enable Compliant Exchange

China Cross-Border Data Transfer: Enable Compliant Exchange

Discover essential steps for compliant cross-border data exchange in China. Maximize data flow while navigating regulations effectively.

Is Your AI Governance Program Built on a House of Cards?

Is Your AI Governance Program Built on a House of Cards?

The CJEU's Scania case reveals GDPR's broad data protection scope and the challenges of anonymization in AI. Read Anonos' intervention in advocating for GDPR-compliant, technologically enforced controls for AI and data processing.

New is Old: A Deep Dive into U.S. and European AI Policies and Data Protection Paradigms

New is Old: A Deep Dive into U.S. and European AI Policies and Data Protection Paradigms

A comparison of Biden's AI Order and the Global GenAI Resolution underscores the importance of revisiting Anonymization and Statutory Pseudonymization to enable ethical AI.

Privacy-Enhancing Technologies: Avoiding a $5.4M Fine

Privacy-Enhancing Technologies: Avoiding a $5.4M Fine

Spotify has been fined SEK 58 million, equivalent to $5.4 million USD, over a GDPR data access complaint. Learn how fines like this can be avoided by following clear GDPR guidelines, including the use of Privacy-Enhancing Technologies (PETs) to better protect, manage, and use customer data

Unlocking AI's Potential: CDAO 2023 Takeaways

Unlocking AI's Potential: CDAO 2023 Takeaways

Delve into the key takeaways from CDAO - from the revenue-driving value of AI to the lessons on timing and market expectations.

Shift Left Privacy: Enabling Cloud and Data Mesh

Shift Left Privacy: Enabling Cloud and Data Mesh

With the rise of cloud-native services and data mesh, data protection is central to business operations. To remain competitive, organizations need to implement a “Shift Left” privacy approach to respond to challenges proactively.

Modernize Your De-Identification Toolbox for Cloud Use Cases

Modernize Your De-Identification Toolbox for Cloud Use Cases

Many organizations grapple with outdated de-identification techniques while pursuing advanced cloud-based strategies. To effectively safeguard data throughout its lifecycle, organizations must embrace innovative, comprehensive data protection strategies.

Anonymeter: Assessing Privacy Risks in Synthetic Datasets

Anonymeter: Assessing Privacy Risks in Synthetic Datasets

In this article, we introduce Anonymeter, an open-source tool developed by Anonos for organizations to evaluate the privacy risks of their synthetic data.

Data Safeguarding: Understanding Masking & Protection

Data Safeguarding: Understanding Masking & Protection

Data masking methods are a set of techniques designed to preserve sensitive information. This glossary of popular data masking methods lists and describes 10 of these techniques as well as provides an overview of other methods for protecting data.

Building Fair AI: The Importance of Data Privacy

Building Fair AI: The Importance of Data Privacy

Incorporating insights from Gartner latest Market Guide for AI TRiSM, this blog post outlines what fair AI is, discusses common privacy and security challenges in deep learning, machine learning, and AI, and highlights how data protection tools can enhance AI fairness.

Preventing Data Misuse with Statutory Pseudonymization

Preventing Data Misuse with Statutory Pseudonymization

A recent peer-reviewed article in the Journal of Data Protection and Privacy notes that legal and policy controls are no longer sufficient against data breaches or misuse. Statutory pseudonymization, as defined in the GDPR, provides a unique and beneficial approach to solving these issues.

Data Privacy Day 2023: Events and Resources

Data Privacy Day 2023: Events and Resources

In celebration of Data Privacy Day 2023, we have compiled a list of events, resources, must-reads, podcasts, and recommendations of data experts to follow.

Resolving Enterprise Cloud Data Protection Challenges

Resolving Enterprise Cloud Data Protection Challenges

Cloud computing plays a key role in enterprise data management, but data protection in the cloud is a challenge. This article provides an overview of IDC's spotlight on cloud data compliance, highlighting Statutory Pseudonymization as a way to address most enterprise cloud use cases.

Powering the Seven Universal Secondary Uses of Data

Powering the Seven Universal Secondary Uses of Data

Explore the role of statutory pseudonymisation in GDPR compliance and global regulations, including U.S. law. Gain insights into its impact on trans-Atlantic data transfers and weigh the advantages and disadvantages. Discover how Anonos enhances data privacy.

How Synthetic Data Enhances Enterprise Data Strategy

How Synthetic Data Enhances Enterprise Data Strategy

In this blog post, we examine the adoption of synthetic data across industries, its benefits, and provide an overview of the major use cases and recommendations for data, privacy and business leaders.

IAPP Webinar on Data Breach

IAPP Webinar on Data Breach

Statutory Pseudonymisation helps to reduce reporting obligations and liability under the GDPR when personal data is compromised.

Canada's Privacy Act vs. E.U. Data Protection

Canada's Privacy Act vs. E.U. Data Protection

The Canadian approach to de-identification outlined in Canada’s proposed Consumer Privacy Protection Act Bill C-27 (“Bill C-27”) fails to satisfy the heightened GDPR requirements of pseudonymisation and is likely insufficient to meet the requirements of data protection by design and by default under E.U. law.

Pseudonymisation for Legal, Ethical 4IR Data

Pseudonymisation for Legal, Ethical 4IR Data

Dive into statutory pseudonymisation's role for legal 4IR data flows. With Anonos, smartly evolve your data processing operations.

Pseudonymisation Podcast. Episode No. 2

Pseudonymisation Podcast. Episode No. 2

Listen to Anonos' Pseudonymisation Podcast Ep. 2 for insights on data protection and the pivotal role of pseudonymisation in safeguarding enterprise data.

Belgian DPA: IAB Lacks GDPR-Compliant Pseudonymisation

Belgian DPA: IAB Lacks GDPR-Compliant Pseudonymisation

Explore Anonos' insights from FIMA London on functional separation, paving the way for enhanced data protection.

Updated Schrems II: Top 5 FAQs for Lawful Cloud Processing

Updated Schrems II: Top 5 FAQs for Lawful Cloud Processing

Dive into the updated Schrems II guide. Explore the top 5 frequently asked questions on ensuring lawful cloud processing in compliance with data protection norms.

Identifying Data Maybe Unlawful ; GDPR Pseudonymisation is State of-the-Art for Mitigating “Cloud Risk” and “Lawfulness of Processing Risk”

Identifying Data Maybe Unlawful ; GDPR Pseudonymisation is State of-the-Art for Mitigating “Cloud Risk” and “Lawfulness of Processing Risk”

Processing Identifying Data is Unlawful in Many Situations; GDPR Pseudonymisation is State of-the-Art for Mitigating “Cloud Risk” and “Lawfulness of Processing Risk” Without Losing Value

10 TRUTHS ABOUT GDPR PSEUDONYMISATION

10 TRUTHS ABOUT GDPR PSEUDONYMISATION

Few concepts within the GDPR are as misunderstood as Pseudonymisation.[1] For example, despite common belief to the contrary, the benefits of GDPR-compliant Pseudonymisation extend well beyond preventing unauthorised use of personal data.

European Parliament Highlights the Need for More Effective Data Protection to Comply with GDPR and Schrems II Requirements

European Parliament Highlights the Need for More Effective Data Protection to Comply with GDPR and Schrems II Requirements

The EU Parliament highlights that organisations can no longer rely on simple "data housekeeping" practices alone; instead, they must shift towards advanced data protection approaches — such as GDPR Pseudonymisation — to control Big Data use.

Schrems II: DPAs in Germany Begin Compliance Checks - Other Jurisdictions Soon to Follow

Schrems II: DPAs in Germany Begin Compliance Checks - Other Jurisdictions Soon to Follow

Schrems II enforcement is getting off the ground in Germany, highlighting the serious and urgent need for companies to begin steps towards compliance. A discussion between German Data Protection Authorities (DPAs) at their joint Datenschutzkonferenz (DSK) meeting highlighted the next steps of a Schrems II Task Force: DPAs, led by Hamburg and Berlin, will begin initiating enforcement measures.

Schrems II: How to Protect Against Liability When Using Non-EEA / Equivalency Country Vendors

Schrems II: How to Protect Against Liability When Using Non-EEA / Equivalency Country Vendors

98% of the participants in an Anonos Schrems II webinar held on 13 January, involving 2000+ executives representing 1700+ companies from 50+ countries, expressed concern about the risks associated with cloud-based processing of cleartext EU data and remote access to EU data for business purposes.

EU-UK Trade and Cooperation Agreement Does Not Address Adequacy Decision So the CJEU Shrems II Ruling Applies to the UK

EU-UK Trade and Cooperation Agreement Does Not Address Adequacy Decision So the CJEU Shrems II Ruling Applies to the UK

The Brexit deal does not include any adequacy decision on data protection for the UK, so the principles embodied in the CJEU Schrems II (C-311/18) and subsequent CJEU rulings apply to the UK.

5 Stages of Additional Safeguards Under Schrems II

5 Stages of Additional Safeguards Under Schrems II

The following “5 Stages of Additional Safeguards Under Schrems II” were derived from the top questions and comments submitted by over 4,000 participants in recent Schrems II webinars including General Counsels, Chief Privacy Officers and Data Protection Officers from leading global data-driven companies.

Webinar FAQ 7: Is GDPR-Grade Anonymisation Technically Possible?

Webinar FAQ 7: Is GDPR-Grade Anonymisation Technically Possible?

Anonymisation is a high-risk, short-term strategy. It is no silver bullet. It is difficult if not impossible to achieve in the age of big data, machine learning, and quickly interconnect data sources.

Webinar FAQ 6: Data Pseudonymisation 101 Overview

Webinar FAQ 6: Data Pseudonymisation 101 Overview

The GDPR expressly awards certain benefits to the use of GDPR-compliant Pseudonymisation

Webinar FAQ 5: Explain how the GDPR heightened standard for Pseudonymisation is not the same as the "casual" understanding of the technique.

Webinar FAQ 5: Explain how the GDPR heightened standard for Pseudonymisation is not the same as the "casual" understanding of the technique.

The GDPR definition of Pseudonymisation is very different from the pre-GDPR "casual" understanding of the term – you must now satisfy dramatically heightened requirements.

Webinar FAQ 4: Can I rely on statements by US and other non-EEA/Equivalency Country cloud providers that their Standard Contractual Clauses (SCCs) enable lawful data transfer under Schrems II?

Webinar FAQ 4: Can I rely on statements by US and other non-EEA/Equivalency Country cloud providers that their Standard Contractual Clauses (SCCs) enable lawful data transfer under Schrems II?

No. Data controllers have an affirmative obligation to ensure that SCCs are augmented with “supplementary measures” that ensure protection equivalent to EU data protection laws. This obligation remains the sole obligation of a data controller under Schrems II unless it is expressly assumed by a cloud provider, in which case it becomes a shared responsibility of the parties.

Webinar FAQ 3: Do Additional Safeguards enable Schrems II Compliant EU employee data processing?

Webinar FAQ 3: Do Additional Safeguards enable Schrems II Compliant EU employee data processing?

Yes. If you are already practicing Data Protection by Design and By Default, most employee-related processing involving EU personal data can continue using additional safeguards like GDPR-heightened Pseudonymisation.

Webinar FAQ 2: Do Boards of Directors and stockholders need to be made aware of Schrems II? What about Financial auditors and vertical industry regulators?

Webinar FAQ 2: Do Boards of Directors and stockholders need to be made aware of Schrems II? What about Financial auditors and vertical industry regulators?

Due to potential material adverse impacts of Schrems II noncompliance, consult with legal counsel regarding your obligation to disclose facts to internal and external stakeholders to avoid potential liability.

Webinar FAQ 1: Are BCRs similarly affected by Schrems II like SCCs?

Webinar FAQ 1: Are BCRs similarly affected by Schrems II like SCCs?

Under Schrems II, both BCRs & SCCs require additional safeguards to ensure that foreign laws do not impinge on the EU level of protection they guarantee.

Magali Feys Post Webinar Recap

Magali Feys Post Webinar Recap

I want to thank you for participating in the webinar. I believe we had really engaging conversations with the panelists and viewing all of your questions, which are over 900 questions.

Magali Feys on her PhD Paper

Magali Feys on her PhD Paper

Hello, everybody, after the seminar, I got a lot of questions on the topic of my PhD, which goes about the secondary purchasing or processing of medical data.

Schrems II Compliance for International Data Transfer

Schrems II Compliance for International Data Transfer

Here are the key takeaways. There are three. The first one: The GDPR requires Data Protection by Design and by Default for all Processing.

2 min summary on IAPP Schrems II Article: <br>A solution to enable ongoing lawful transfer of data

2 min summary on IAPP Schrems II Article:
A solution to enable ongoing lawful transfer of data

My name is Gary LaFever and I'm the CEO & General Counsel at Anonos. I'm here to briefly summarize an article that was published by the IAPP regarding the German DPA guidance on how you can in fact have lawful data transfers after Schrems II.

Must Data Minimisation Mean Data Deletion?

Must Data Minimisation Mean Data Deletion?

Data minimisation is a fundamental principle set out in the General Data Protection Regulation (GDPR) as well as in many other privacy laws around the world.

Benefits of Pseudonymisation Under the GDPR

Benefits of Pseudonymisation Under the GDPR

Anonymisation under the GDPR requires irrevocably severing all links between data and the data subject. In contrast, Pseudonymisation (as newly defined under GDPR Article 4(5)) means maintaining those links (suitably accessible by encrypted keys and the like) in the hands of authorized parties only and requiring access to secured keys to see the underlying data or to reveal linkages to underlying data.

Does GDPR-defined Pseudonymisation Overcome the Shortcomings of Anonymisation and Encryption in Response to the Schrems II / Privacy Shield Decision?

Does GDPR-defined Pseudonymisation Overcome the Shortcomings of Anonymisation and Encryption in Response to the Schrems II / Privacy Shield Decision?

I start and end this article with the same question - Does GDPR-defined Pseudonymisation Overcome the Shortcomings of Anonymisation and Encryption in Response to the Schrems II / Privacy Shield Decision?

After Schrems II: Contracts No Longer Enough For International Data Transfer

After Schrems II: Contracts No Longer Enough For International Data Transfer

Companies relying on the EU–U.S. Privacy Shield for data transfers should swiftly implement appropriate safeguards and mechanisms to avoid the risk of having data flows suspended, as the potential costs far exceed any possible, and possibly contemporaneous, fines.

Magali Feys at PrivSec London: Ethical Data Use Strategy

Magali Feys at PrivSec London: Ethical Data Use Strategy

I'm Maggie Feys. I am Chief Strategist Ethical Data Use with Anonos. And I also have a private practice as a tech lawyer. I specialized in IP, IT, and data protection.

Between Utility and Privacy: the Data De-Identification Balance

Between Utility and Privacy: the Data De-Identification Balance

The inherent desire for organizations to be data driven is now coming up against calls to be respectful of user privacy. This conflict has led to the emergence of de-identification solutions that establish a balance between data usability and user privacy.

Avoid the Trust Deficit with AI

Avoid the Trust Deficit with AI

Exploring the need for clarity in the AI industry on lawful possession and use of personal data. Addressing the trust deficit for a transparent future.

Does Encryption Enable GDPR Compliant Data Use?

Does Encryption Enable GDPR Compliant Data Use?

Decrypting Encrypted Data: GDPR Compliance Implications. Anonos explores how encryption fails to protect data in use under GDPR regulations.

What the Google 50 Million Euro GDPR Fine Means for Big Data Analytics.

What the Google 50 Million Euro GDPR Fine Means for Big Data Analytics.

Learn from Google's GDPR Fine: Analytics legality now demands new safeguards. Insights from Anonos' CEO on GDPR's impact.

BigPrivacy at Health 2.0: Innovations in Healthcare Data

BigPrivacy at Health 2.0: Innovations in Healthcare Data

My name is Gary LaFever and I will demonstrate how BigPrivacy technology enables lawful Big Data analytics.

Big Data Needs BigPrivacy: How to Legally Process, Use and Share Data Around the Globe to Avoid the Facebook Backlash

Big Data Needs BigPrivacy: How to Legally Process, Use and Share Data Around the Globe to Avoid the Facebook Backlash

The Facebook-Cambridge Analytica data scandal is a watershed moment that leaves many organizations wondering whether they can continue to collect, use and share personally identifying data for research/academic purposes and commercial/data analysis purposes.

5 Steps to Enable Compliant Analytics

5 Steps to Enable Compliant Analytics

Your company is not alone in its desire to engage in advanced analytics, data sharing, AI, and migration to the cloud. But, data uses are evolving faster than the capabilities of traditional privacy and security controls. You must technically enforce policy controls at the data element level or your company will be left alone when competitors are maximising compliant data use, sharing and migration to the cloud.

How To Continue Lawfully Using Historical Data Under The GDPR

How To Continue Lawfully Using Historical Data Under The GDPR

Starting next year, everything companies historically have done with the oceans of data they amass and process each day will become illegal, absent new technical controls.

Five Stages of GDPR Adjustment

Five Stages of GDPR Adjustment

This post includes new information responding to questions raised following publication of a prior version appearing in International Association of Privacy Professionals (IAPP) Privacy Perspectives.

2 Alternatives to Consent for Big Data Analytics Under the GDPR

2 Alternatives to Consent for Big Data Analytics Under the GDPR

Under EU law, the right of “Protection of Personal Data” is an inalienable fundamental right that an individual cannot contract (or consent) away. Before the GDPR, having access to data was tantamount to having legal right to use the data.

3 GDPR Compliant Strategies to Maximize the Value of Big Data Analytics

3 GDPR Compliant Strategies to Maximize the Value of Big Data Analytics

The benefits of complying with new GDPR technical and organisational requirements extend beyond merely avoiding liability under EU law. The tremendous potential of big data analytics, artificial intelligence (AI) and machine learning require organisational and technical measures to enable data handling to support maximum lawful data value extraction on a global basis.

Load more