With a sufficiently specific set of parameters, a malicious user could theoretically use known details about a person to find out more information about a specific person, no matter what the identifier may be. Further anonymisation is required.
"talk to someone that knows data" In what context? Different data is required across multiple fields. If you're proposing an exhaustive list, that would be damn near impossible to draw up. Far better to build a framework to sit within. This creates the risks that the researchers that this amendment protects are searching for.
Biting the hand that feeds IT
