The great irony is that actual privacy requires unique identifiers, like RealID or equiv. GUIDs unlock the Translucent Databases achievement, actual per field

The great irony is that actual privacy requires unique identifiers, like RealID or equiv. GUIDs unlock the Translucent Databases achievement, actual per field encryption of PII data at rest. TLDR, clever applications of salting and hashing, just like with proper password storage. https://www.amazon.com/Translucent-Databases-Peter-Wayner/dp/0967584418 https://www.amazon.com/Translucent-Databases-Peter-Wayner/dp... http://wayner.org/node/46 http://wayner.org/node/46 I was utterly against RealID, until I figured this out. Much chagrin. Super embarrassing. Source: Worked on both electronic medical records and protecting voter privacy. Did a translucent database POC for medical records, back in the day. If there's another technical solution, I haven't found it. But I think to your point, people generally don't want the sensitive data being collected in the first place. I don't have an answer for that.