The idea of open data, as you succinctly put, stops with privacy. Anything that you consider a disclosure of privacy is not to be published as open data. Hashed identities may be your delineation, beyond which there is no access. I applaud this point.