GDPR-89-04
Requirement
89 — Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
Use non-identifying processing where purposes can be fulfilled
Description
Organizations must use further processing that does not permit or no longer permits identification of data subjects where the special purposes can be fulfilled in that manner.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
GDPR-89-01
Data Governance
Implement appropriate safeguards for special purpose processing
GDPR-89-02
Requirement
Ensure technical and organisational measures for data minimisation
GDPR-89-03
Data Governance
Use pseudonymisation where purposes can be fulfilled
GDPR-89-05
Requirement
Apply derogations only to specified processing purposes
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started