On 24 Jul 2022, at 22:09, Ángel via mailop wrote: > Now, if we instead have the hash bbbaa1af939a01d0e22286c63827d936 > If you can hash multiple emails until finding who that refers to, then > it's equivalent to the email. But if it is also the hash of other email > addresses jsmith@hotmail.example and janedoe@gmail.example then itwould be > considered to be anonymized.
But in this case, you already have the email address so there is no value in finding the corresponding hash value. You already have the PII. The value in using hashes is that having a collection of hashes is not equivalent to having a collection of emails. You would still need to use brute force—e.g., try every possible email address—to determine if the hash for that address is present. And even this would not help in determining which person is referenced by the identifier (the email address). Best regards -lem _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
