This article is incomplete without any mention of strong privacy techniques such as differential privacy. There is a write-up by Cohen and Nissim [1] where the

This article is incomplete without any mention of strong privacy techniques such as differential privacy. There is a write-up by Cohen and Nissim [1] where they analyze the privacy statutes in the GDPR and derive a formal definition of privacy, which they call Privacy Singling Out, intended to match the text of the document. They then show how PSO compares to other privacy definitions, and in particular that Differential Privacy implies PSO (and thus satisfies GDPR). Differential Privacy, in turn, is basically an entire field on its own, with entire textbooks [2] and workshops [3]. It also dominates many privacy-focused conferences, and has been used by US Census Bureau. There are plenty of truly GDPR-compliant analytics one can do. It just takes some effort to understand how. [1] https://www.pnas.org/doi/10.1073/pnas.1914598117 https://www.pnas.org/doi/10.1073/pnas.1914598117 [2] https://www.cis.upenn.edu/~aaroth/Papers/privacybook.pdf https://www.cis.upenn.edu/~aaroth/Papers/privacybook.pdf [3] https://tpdp.journalprivacyconfidentiality.org/2022/ https://tpdp.journalprivacyconfidentiality.org/2022/