@hasanhaja i would still argue that a hash of PII, esp if it is only hashed with SHA or so, without pepper etc, should still be considered PII. In my POV it should only not be considered PII if it's fully anonymized and I would argue as you pointed out this might not be the case with just hashing