It does, see my other comment. It means employees CANNOT deanonymize the data. If done properly, the key is off network and off premises, only retrievable with a lot of red tape.
Bound to an individual, but not actionable via the collecting agency without outside input.