The idea of stripping people's names from their data from their histories and passing that around turns out not to work: it is too easy to figure out who they were.

All the more reason why digital systems must not collect people's histories.