What about converting personal data into anonymous data? For example, say a company tracked how many miles some person was a passenger on a bus. Now there is a request to delete their data, so could they simply overwrite their ID and name with "0000", "noname"?