Context is irrelevant. What is relevant is whether a value, for example a hash, can be identified to a specific person in some way.
I've been told this directly by lawyers who specialize in GDPR and CCPA etc. I will take their word over yours.
If you are a lawyer with direct expertise in this area then I'm willing to listen.