Privacy-Enhancing Technologies: Anonymisation, Pseudonymisation, Tokenisation, Differential Privacy

Technique menu

• Anonymisation — irreversible under a defensible threat model
• Pseudonymisation — separate keys, still personal data under GDPR-style regimes
• Tokenisation — vaulted substitutes for identifiers
• Differential privacy — calibrated noise for aggregate releases

Selection criteria

Utility needs, attacker model, key custody, and whether outputs will be published externally.

Governance

Version algorithms, approve threat models, and log deanonymisation/reveal events with SIEM-worthy audit trails.

How CyberSilo Helps

• Evidence mapping in CyberSilo CSA
• Detection and logging proof with ThreatHawk SIEM
• Advisory scoping — contact CyberSilo

Frequently Asked Questions

Is hashing enough for anonymisation?

Often no — salted hashes can remain personal data.

Do PETs replace DPIAs?

No — they may reduce risk inside a DPIA.

Where do they help most?

Analytics warehouses, lower environments, and safe data sharing.

Related Resources

• GDPR encryption
• Privacy hub