"Its time to understand the difference between the letter of the law and the spirit of the law isn't it?"
I have a novel suggestion: ASK the person that owns the data if it can be used, in writing, and THEN ensure proper privacy protection as much as possible.
Then you comply with GDPR [as I understand it], and are STILL able to do whatever research you need with the data.
Yeah, treating the owners of the data as PEOPLE instead of STATISTICS - what a novel concept!
Biting the hand that feeds IT
