Go to contents Go to main search

Instructions on the anonymisation of test data

Date of issue
1/21/2025
Record no.
VH/5518/06.00.00/2023
Validity
1/21/2025 - Until further notice

1 Key terms

Anonymisation Anonymisation means that personal data is processed such that the person cannot be identified on the basis of the data under any circumstances. Also, it must be impossible to convert the data back into an identifiable form.

Pseudonymisation Pseudonymisation means that personal data is converted such that it cannot be attributed to a specific person without the use of additional information. A requirement is that the additional information is kept separately and that it is subject to technical and organisational measures ensuring that the personal data cannot be connected to an identified or identifiable natural person.

Pseudonymised data is still personal data and its processing is subject to the data protection regulations. In other words, the person can be identified by combining data from different datasets even though the data has been pseudonymised.

GDPR General Data Protection Regulation (EU) 2016/679.

2 Instructions on the anonymisation of test data

These instructions provide the information needed to anonymise test data used in testing. The instructions are for organisations participating in the Positive credit register’s stakeholder testing.

The data used in testing may not be connectable to natural persons or their data. In anonymisation, the data is made unidentifiable such that a person cannot be identified on the basis of the data in any situation, and the data cannot be converted back to the original state by any means. Personal identity codes or other data that can be connected to natural persons may not be sent as test data under any circumstances: the test data must always be anonymised.

If the data can be restored with a code key or by combining it with other data, the data in question is pseudonymised data. According to the GDPR, pseudonymised personal data that can be connected to a natural person with the use of additional information must be regarded as data relating to an identifiable natural person. Consequently, pseudonymisation is not enough but all test data must be fully anonymised.

All test IDs used in stakeholder testing are artificial business IDs or artificial personal IDs that the person who filled in the testing start notification receives from the Positive credit register’s administrator.

The stakeholders themselves are responsible for the anonymisation of their test data in every respect. Anonymisation must be carried out in accordance with these instructions.

3 Indentifiers used in testing

Testing stakeholders are provided with artificial lender’s Business IDs and names, artificial borrower’s personal IDs and Business IDs, and artificial reassignee’s business IDs and names.

The above-mentioned artificial personal IDs, Business IDs, their combinations, or artificial foreign business IDs must be used in testing. Natural persons’ actual personal data may not be used in testing under any circumstances. No identifiers that could be connected to natural persons by any means may be used in testing.

The stakeholder’s own artificial or anonymised identifiers cannot be used in testing.

4 Loan data to be reported to the register

During testing, stakeholders send test data connected to artificial personal identity codes to the testing environment through APIs. All test data submitted through APIs must be artificial or anonymised in accordance with these instructions. Loan number and lender’s name for marketing purposes, for example, must be anonymised.

5 Data to be anonymised and examples of anonymisation

Table 1 below specifies the data content to be anonymised and any special features that should be taken into account in the anonymisation, such as various requirements for the format. All data in the table must be anonymised. The table also contains some examples for anonymisation.

Table 1. Data to be anonymised, requirements and reasons for anonymisation. The testing stakeholder connects anonymised data to artificial identifiers that the Positive credit register has provided for purposes of testing.

 

Data Special features relevant to anonymisation Reason for anonymisation
Personal identity code (IdCode) The Positive credit register provides all artificial personal IDs used in testing (borrower and guarantor).  
The borrower’s Business ID (borrowerBusinessID) The Positive credit register provides an artificial Business ID for testing purposes.  
Loan number
(Number)

The loan number must be changed completely to make it unidentifiable. If loan numbers contain a part identifying the lender, that part must also be changed.

 

There are no requirements for the format of the loan number.

 

Example: Original value FI5992954118737928, anonymised value 123456789.

The loan number can be connected to a natural person.

Gross income
(GrossIncomeOnFile)
  Certain individuals can be identified with their exceptional income data, such as an exceptionally high salary or benefit.
Net income
(NetIncomeOnFile)
  Certain individuals can be identified with their exceptional income data, such as an exceptionally high salary or benefit.
Lender's Business ID (IdCode) The Positive credit register provides an artificial Business ID for testing purposes.  
Lender’s name for marketing purposes
(LenderMarketingName)
Lender's name for marketing purposes must be fully anonymised.  Lender’s name for marketing purposes may refer to a small-scale lender, for example, so it may be possible to identify individuals.
Reassignee’s ID code (IdCode) The Positive credit register provides an artificial Business ID for testing purposes.  
Reassignee's name (Name) The Positive credit register provides an artificial reassignee’s name for testing purposes.  
Reassignee’s country code (CountryCode) The Positive credit register provides a country code for testing purposes.  
Foreign business ID (IdCode) The Positive credit register provides an artificial foreign business ID for testing purposes.  
Date of conclusion (ContractDate)   The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Amortization paid (AmortizationPaid)   The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Interest paid
(InterestPaid)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Other loan expenses paid
(OtherExpenses)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Loan balance (Balance)   The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Amount of loan balance (Balance)   The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Unpaid amount of an instalment
(DelayedInstalment)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Original due date of a delayed instalment
(OriginalDueDate)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Deferments of amortizations
(DefermentPeriods)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Leasing – Monthly instalment
(MonthlyInstalment)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Leasing – Date of conclusion
(ContractPeriodStartDate)
  The person that the data relates to can be identified on the basis of the data as such or in combination with other data.
Page last updated 1/22/2025