More than names and email addresses
Names and email addresses are obvious examples. A device ID or a combination of details such as age and location may also point to one person. Removing a name does not automatically make a record anonymous.
Privacy laws use different terms and definitions for this information, including “personal data”. Health and financial details can be especially sensitive.
Handle it with care
Organisations should collect only what they need, limit who can see it, keep it safe, and delete it when no longer needed. This also reduces the risk and harm of a data breach.