@jeremiah @tomey @realcaseyrollins He is saying a hash is considered "Pseudonymised data": https://tietosuoja.fi/en/pseudonymised-and-anonymised-data#:~:text=Pseudonymised%20personal%20data,the%20use%20of%20additional%20information

It is apparently considered even MORE identifying than fully "anonymous data".

I think that is very wrong. Unless their database is not a hash database at all, but a facial recognition database (maybe it is), the hash itself is a "digital fingerprint" of _that specific image_, and not of the person involved.