Remove the names. Replace them with codes. Place the key with a third party. Anonymous data? Not necessarily. Recent decisions by the Garante and the CNIL are clear reminders that key-coded health data does not automatically fall outside of data protection law. Although SRB offers a potential route to treating pseudonymised data as anonymous in the hands of a particular recipient, it is not a silver bullet. Pharmaceutical and medtech businesses must still address re-identification…