My usual question...
...when I read stories like this. Has anyone done a Privacy Impact Assessment [ico.org.uk] for this project? And then the followup questions: If so, then may we read it, please? Alternatively, if not, then why not?
At the very least, a PIA would indicate some detail around the otherwise hand-waving assertions about achieving anonymity.
Biting the hand that feeds IT
