18.06.2026 - Publications
Consolidation of the French doctrine on personal data and pseudonymisation after the CJEU’s SRB ruling
Following the CJEU’s SRB ruling (C-413/23, 4 September 2025), French doctrine on the qualification of personal data and pseudonymisation has consolidated through the decisions of the Conseil d’État (13 February 2026, n° 498628) and the CNIL in the IQVIA case (26 May 2026, n°SAN-2026-008): pseudonymisation remains a risk-reducing security measure, not a passport to anonymity.