Simply removing direct and indirect personal identifiers isn’t enough to achieve de-identification of a dataset
France’s new Digital Republic Act [1] significantly strengthens protections that control how French businesses use and retain personally identifying data