> The pseudonym (gid) is itself considered PII under GDPR. I know of multiple systems that use a UID but throw away a user’s information, including the UID map

> The pseudonym (gid) is itself considered PII under GDPR. I know of multiple systems that use a UID but throw away a user’s information, including the UID mapping, when the user leaves. This allows historic metrics to be retained without ever identifying a user who isn’t still using the system. AFAICT, guids are a grey area.