Comment by akavel

I've read the Wikipedia summary, and it appears to me, that GDPR only requires encryption, not anonymisation, of personal data! Or did I miss something?