Better to simply not collect the data in the first place. It's like the hierarchy of controls used in risk management, from most to least effective:

- Elimination – physically remove the hazard

- Substitution – replace the hazard

- Engineering controls – isolate people from the hazard

- Administrative controls – change the way people work

- PPE – protect the worker with equipment

Only with hazardous data, or things like moral hazards rather than physical hazards.