For an example, if there is a Database record:
Phone| Option| Actived| Deactivated| ... (555)-123-4567| A| 2017-04-12| 2018-01-10| ...
If all sensitive information is deleted and information is reduced, such as:
Phone| Option| Actived| Deactivated| ... (XXX)-XXX-XXXX| A| 2017| 2018| ...
This process of hiding users data is considered anonymization and as such should not be applicable. On the other hand, this approach will ensure that information about users who had option A activated last year will be kept without storing the users personal information.
However, by matching multiple sources, someone COULD potentially still find out what this number was.
Does this mean that reasonable effort was put into securing the users sensitive data or does 'Right to Erasure' mean just that, delete everything about that user? That seems like it would seriously harm a lot of organization analytic.