Replacing PII identifiers with pseudonyms. Data can still potentially be re-identified so GDPR still applies. Less complete than anonymization.
Want to actually apply concepts like this instead of just reading definitions?