In https://meta.wikimedia.org/wiki/Wikimedia_Foundation_Annual_Plan/2015-16 a Chief Privacy Officer was budgeted in Appendix B as an Engineering position. Is that position still open?
I'm unable to participate effectively in the analytics list discussion regarding the trade-off between the two hypotheticals of leaking personal information and being able to debug unspecified future Ops needs.
I would recomend this general outline of best practices: https://privacyperfect.com/wp-content/uploads/2016/08/GDPR_infographic_Priva...