WIthin the past couple of years protection regulations have been processed in different countries, starting in Europe. Then it was continued in California. After this India proposed India Data Protection Act of 2019 which gives you the right to be forgotten.
When user data is processed at a business, unique algorithms decouple sensitive data like location traces and medical records from identifying details like email addresses and passport numbers, de-identification. It may be reversed, so organizations can recover the link between the users’ identities and their data when needed. Such controlled re-identification by legitimate parties happens routinely and is perfectly appropriate, so long as the technical design is safe and sound.
In other words, if a malicious attacker where to get ahold of the de-identified database and re-identify the data, the online criminals would gain an extremely valuable loot. As we see in continued data breaches, leaks, or online espionage, our world is full of potential adversaries seeking to exploit weakness in information systems.
To read more, click on the link below.
https://www.wired.com/story/opinion-indias-data-protection-bill-threatens-global-cybersecurity/