Replace the Names With Codes, the Same Way Every Time ANON
Hashing a name does not anonymise it: there are only so many names, and anybody can hash all of them. A keyed hash cannot be reversed without the key, and is stable across every file.
The data
Read in this tab. Nothing is uploaded.
The key
Generated on this device and never stored with the data. Same key, same codes, across files and across years. A new key produces entirely different codes, which is how one release is separated from another.
Keep it somewhere the data is not. Without it you cannot re-link anything to anything. With it, anybody can re-identify everybody. Both of those are properties of the method rather than faults in it.
Which columns
What is left identifying
The result
Questions people ask about ANON