Make the "Use anonymous identifiers instead of names in reports" setting trackable
In the Office 365 Admin Center under Settings - Add-Ins is a setting "Use anonymous identifiers instead of names in reports". This can only be set by Global Admins, but you cannot track (in Audit Log), whether someone changed this setting. From a GDPR point of view, it is necessary to be able to track this (Art.5 /1/2 + Art. 32/1/a GDPR). Especially in Germany this is also important for Works Councils, as Office 365 is subject to co-determination, ans a Works Council will not allow the use of personal identifiable information in reports, that have a statistical purpose only.