New legal insights challenge assumptions about pseudonymized data, reshaping data governance and collaboration in rare disease research.