zlacker

Yes. For example, the GDPR distinguishes full datasets where identifiers have been removed (calling it "pseudonymisation") from truly anonymized data. The former is still subject to the regulation, just like any other personal data.