It could be taken to mean anonymization in a GDPR context, but sometimes it’s also taken just to mean pseudonymization in GDPR terms, like exchanging it to a pseudonym that could be linked back afterwards. The term itself is ambiguous. Some people see "de-identification" just as masking.