The GDPR refers to pseudonymisation as a process that is required when data is stored (as an alternative to the other option of complete data anonymisation )  to transform personal data in such a way that the resulting data cannot be attributed to a specific data subject without the use of additional information. An example is encryption , which renders the original data unintelligible and the process cannot be reversed without access to the correct decryption key . The GDPR requires for the additional information (such as the decryption key) to be kept separately from the pseudonymised data.
The Commission was set up from the start to act as an independent supranational authority separate from governments; it has been described as "the only body paid to think European".  The members are proposed by their member state governments, one from each. However, they are bound to act independently – neutral from other influences such as those governments which appointed them. This is in contrast to the Council , which represents governments, the Parliament , which represents citizens , the Economic and Social Committee , which represents organised civil society, and the Committee of the Regions , which represents local and regional authorities.