Under GDPR simple hashing is not enough. You have to throw away the hashing salt (delink the hash from the profile) in order to be compliant. The whole point is

Under GDPR simple hashing is not enough. You have to throw away the hashing salt (delink the hash from the profile) in order to be compliant. The whole point is exactly the result, you should not be able to map the profile to the data you have.