In Google we have a bunch of researchers on anonymity and that whole thing is _hard_. I vaguely remember supporting, a couple years ago, a pipeline where logs s

In Google we have a bunch of researchers on anonymity and that whole thing is _hard_. I vaguely remember supporting, a couple years ago, a pipeline where logs stripped out of "all PII" came at one end, aggregated data out of the middle... Into an anonymity verifier, that then redirected much of it into /dev/null, because a technique is known to de-anonymise it. And the research on differential anonymity advanced quite a bit in the meantime.