Hi everyone, I'm Flick.

And I'm Natalie.

And we are both European privacy specialists from Phil Fisher and we are going to be delivering

the bite-size legal update to you today.

Natalie, what are we talking about?

Today we're going to be talking about the case of SRB and EDPS, which is the case that's

caused a over-stir online around the concept of anonymization.

And the genesis of this is I posted a LinkedIn post about it,

and it kind of went a little bit viral.

So we wanted to sort of tackle some of the comments that we got and also just

chat through the case because it's an interesting one.

Okay, Flick, tell us what the case is about. Cool. Okay, so this is an decision that came through the general court, which is a court of the CJAEU.

It came about in the sort of last week of April.

It involves a European institution called the Single Resolution Board.

We won't get into the heady details of what they do, but essentially

they had been soliciting comments about a bankruptcy resolution that they were trying to pass

against a Spanish bank. They needed to get comments from the shareholders and creditors of that bank,

so they spun up an online form and collected the comments through that form.

And importantly, when they were sort of processing those comments, they removed the or replaced

the name of the shareholders with a randomly generated 33-digit alpha-numeric code.

Essentially, they keycoded that data and then shared that keycoded data with their third-party

consultancy firm who was helping them work through this whole process. So that consultancy firm

...