The UK Upper Rights Tribunal has ruled that organisations do not need to search the Internet in order to determine whether the data is personal or sensitive. The Tribunal suggested that organisations only need to consider “the immediate context” of the data in order to determine its status.

This ruling reflects the approach broadly supported by the Article 29 Working Party, which has in the past warned of the “residual risks to data subjects” from anonymised datasets in light of the potential presentation of new data.

The UK Upper Rights Tribunal’s ruling (PDF)