Default anonymization of Form Data

[cbunicef]

As a PLATFORM ADMINISTRATOR I want to protect the identity of users submitting polls/surveys/quizzes by default so that PII is not exposed accidentally.

As a DATA ANALYST I want to be able to identify multiple submissions from the same individual, but I don't normally need to know each individual's actual identity/account information.

Suggestions:

• For each Form Data entry, account names and other system PII are by default displayed and exported as a random sample of numbers without replacement
• That anonymization is turned on by default, via a checkbox in Site Settings
• In user permissions, Admins can grant the ability for particular users or groups to view and extract non-anonymized data from all or particular Form Data
• Next to the export button, a check box to "Include Account Info"