Anonymization is processing data so the people in it cannot be identified by any means reasonably likely to be used, by anyone. Truly anonymous data falls outside the GDPR, but the bar is high: if re-identification is reasonably possible, the data is only pseudonymized.
Why it matters when licensing company data
Rich records such as free-text tickets, call audio and video are hard to anonymize fully, because context can identify a person even after names are gone. In practice most company-records licenses rely on de-identification plus contractual limits rather than claiming full anonymity.
See anonymization vs pseudonymization and de-identifying company data.
Source
GDPR Recital 26: not applicable to anonymous data. Definition reviewed November 7, 2026 by Origin Data Partners.