Which process decouples PII from a set of data and provides anonymity, but allows identification of the person to whom the data belongs under strictly controlle...