What's your plan for "anonymized" data that's all hilariously easy to de-anonymize? Example: https://www.nytimes.com/interactive/2019/12/20/opinion/locat...
Anyhow, in the spirit of HN working this out together (should we form a bipartisan Working Group for this?):
Any data which, taken together, improperly identifies an individual may not be stored at all. I can't think of any reason why anyone outside of law enforcement needs this location information.
How's that?