Data Pseudonymization vs. Data Anonymization in the GDPR