My high-level reading (I’m not a lawyer..):
- Anonymization is viewed as a processing activity and requires a legal basis. (The paper argues different approaches).
- Transparency obligations must be met.
- Anonymization can be used as an alternative to deletion.