>> Rob van Eijk wrote...
>> I would really want the unlinkability in there as well.
I think it is ALREADY there in what Dan has come up with, yes?
It ALREADY says 'or otherwise linked to...'
I took that to (already) mean that when you are done 'deleting'
and/or 'modifying' and/or 'aggregating' and/or 'anonymizing'
and/or 'otherwise manipulating' ALL of the data you are trying
to store/save... if there is any chance that any of the data
can still be 'linked to' a 'particular user, user agent, computer or device...
...then you haven't gotten the cows into the barn yet and the
data you are saving/storing cannot be considered 'de-identified'.
Kevin Kiley