(1) Anonymization is the process of rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data.

(2) To anonymize the personal data, personal data shall be rendered impossible to relate to identified or identifiable person, even through using appropriate techniques in respect of the recording medium and relevant field of activity, such as recovery of data by the data controller, recipient or recipient groups and matching data with other data.

(3) The data controller is obliged to take any type of technical and organizational measures required for ensuring anonymization of personal data.