Re: By the time it's ingrained and encoded into a deep learning net...
In your example there is actually no need for Bob to be personally identifiable so his name/ID should not even be part of the input.
I think this is where this all should start: if it is painful to remove personal data and will deliver a ginormous fine when it doesn't happen, maybe it's better not to use data that can identify an individual.
Key is, however, that fines are at GDPR levels of pain, not the usual "give me the change in your pockets and we're even" sort of fines that are the norm in the US.
Biting the hand that feeds IT
