Isn't the "jigsaw identification" essentially similar to the 'personally identifiable information' addressed by GDPR? It seems to me that both constructs stand and fall together.
PII is precisely defined, not pulled out of thin air, and nobody's going to jail because of it. Rich corporations like Amazon are fined for fucking with it though.
