Re identification risk emails carry with pseudonyms
The short answer
Emails carry re-identification risk because consistent pseudonyms keep one person's messages linked across your archive. Troveo shows labels like PERSON-014. Someone with clues like job titles or rare incidents could rebuild identities. A lawyer should review your archive.
Names are the easy part of an email. The links between messages are the harder part, and buyers want to keep them.
Why do consistent pseudonyms keep links?
A pseudonym that changes from one message to the next would break the thread. So the swap is consistent, and the same label keeps one person's work connected across records.
Troveo's business data page shows a before and after in which PERSON-014 and EMAIL-019 stand in for a customer and an address.
David Revland, who works on human data at micro1, said in an undated recorded forum talk that micro1 swaps a name for a consistent stand-in across tools, so the cross-tool trail survives.
What do emails add that other records do not?
An email thread carries a sender, recipients, replies and dates. Troveo describes what a buyer receives from email as threads with senders, recipients and linked responses. Those fields are the links.
My reading is that the same fields can point back to a person when a job title, a rare incident or a signature block stays in the text. The UK ICO makes the same point about context: people can stay indirectly identifiable through additional information or other techniques, even when no key is held.
What did the Spirit union object to?
Time reported that the flight attendants' union objected because the dataset keeps referential integrity, so even anonymized information about members could be reconstructed. The court's privacy ombudsman wrote on 5 Oct 2026 that she did not examine risks to employees or third parties.
My Spirit Airlines page has the timeline, and the de-identification page compares the legal tests.
What do the legal tests say about pseudonyms?
The UK Information Commissioner's Office says pseudonymised data stays personal data for anyone who holds the additional information. The Justice Department's bulk-data rule counts data whether or not it is pseudonymized, as the DOJ rule page explains.
Recent studies on whether language models can match accounts and find missed identifiers are on my re-identification study page.
What should an owner ask the buyer?
- Who holds the key that maps labels back to names?
- Do links between messages and across tools survive, and why?
- Does anyone test for re-identification after the swap?
- Are employees in the archive, and what did they agree to?
My rights check lists what to settle with counsel, and the risk map lists what published buyer terms say. Talk to a privacy or commercial lawyer in your state before you sign.
micro1 may pay us a referral fee if a company we introduce goes ahead with it. How we are paid
Vaultfish helps you run the process. We are not lawyers and this is not legal advice. If you need counsel who knows this area, we can point you to one. Ask for a referral
