hard20 pts · first answer countsgovernancepiisecurity

Hashing emails is not anonymising

A team pseudonymises customer emails with plain SHA-256(email) and shares the hashes with a partner, saying the data is anonymous. What is the main problem?

A.SHA-256 output is too long to storeB.Hashes cannot be used for joinsC.SHA-256 is an encryption algorithm, so the partner can decrypt it with the public keyD.Emails are guessable, so anyone can hash a list of known emails and match them; use a keyed HMAC or tokenisation with a secret held by you

← New column in a dbt incremental model Overwrite deleted the whole table →