Article 11 GDPR (Processing Which Does Not Require Identification)

Understanding Article 11 of GDPR

Processing purpose no longer requires personal data (Article 11(1) GDPR)

Article 11 of GDPR indicates that a data controller does not necessarily need to ask or get additional information from a person for identification purposes in the event they do not need to process personal information to render their services.

Processing does not allow the identification of a person (Article 11(1) GDPR)

Similarly, if data processing does not allow the identification of a person, the data controller does not have an obligation to collect personal information for the purpose of identifying the data subject.

Data controller to inform the data subject (Article 11(2) GDPR)

In the instances when the data controller no longer requires to process personal data or the processing activities do not allow to identify an individual, the data controller should inform the data subject that it is not in a position to identify them unless the data subject gave information enabling his or her identification to exercise a right under GDPR.

Recitals applicable to Article 11 of GDPR

Relevant Recitals: 57

GDPR Regulation article-by-article overview

Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.

Cited Legislation in Article 11 or relevant recitals


GDPR Text: Article 11 of GDPR and Relevant Recitals

GDPR Text Source: EUR-Lex

Official GDPR Text: General Data Protection Regulation 

Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679)