Book 3 · Lesson 3.7

Deterministic pseudonymization

Separate pseudonymization from redaction
Map real names to stable dashboard labels
Discuss where mapping tables live

Prerequisites: 3.6

Redaction removes PII (alice@example.com → [EMAIL:…]).
Pseudonymization replaces identity with a stable alias (Alice Chen → Developer_Alpha).

PseudonymizationDemo — same person always maps to the same label for trend charts.

HR vs dashboard view

Audience	Sees
Manager with HR access	Real name + context
Team Radar aggregate	Pseudonym only

Teach-back prompt

Can you deanonymize without the mapping table?

Pseudonym mapping table

PseudonymizationDemo — pick two people, note stable labels.
Sketch where HR mapping table would live (not in git).
Explain difference from redact_pii_deterministic.

Lesson 3.7 check

1. Pseudonymization maps… Random UUID each view Stable alias per person TLS ciphers Kafka offsets