(26) Data protection principles should apply to any information about identified or identifiable individuals. Pseudonymized personal data that, using additional information, can be attributed to an individual should be considered information about an identifiable natural person. To determine whether an individual is identifiable, all reasonably likely means (including extracting records about the same person) that are reasonably likely to be used by the controller or another person to directly or indirectly identify the individual should be considered. In order to determine whether a particular modality is reasonably likely to be used to identify an individual, it is necessary to take into account any objective factors, such as the cost and time required to identify the individual, and to take into account the technology available at the time of processing, as well as technological advances. The data protection rules should therefore not apply to anonymous information, i.e., information that does not involve an identified or identifiable natural person, or to personal data anonymized in such a way that the data subjects cannot be identified at all or are no longer identifiable. This regulation therefore does not apply to the processing of such anonymized information, including processing for statistical or scientific purposes.