Any system can be undermined with enough criminal energy.
People often argue against certain laws that they can be abused if judges collude with the executive.
But if the separation of power between executive, legislative and judiciary and the related mutual controls break down then the actual laws don't matter anymore anyway.
If it is truly anonymized then it isn't protected under GDPR.