a. Do not expose any PII (or part of it) that can reveal someone's identity:

b. Do not blur everything, otherwise vulnerability existence may be questioned:

c. Just keep a small, non-attributable part of PII visible (e.g. first name and email domain):