Privacy-Preserving Data Analytics: Stop Collecting What You Do Not Need

This report advises data teams to avoid collecting persistent user identifiers by default, explaining the remediation costs when privacy rules require removing PII. It recommends two approaches—pseudonymization (storing irreversible surrogates with a separate mapping system) and removing identifiers entirely by using session IDs—and emphasizes making these decisions during project scoping to reduce privacy risk and engineering overhead.