Will my customers or staff be exposed?
The goal is that no person can be identified in anything a buyer receives. Personal details are removed before delivery, you review a sample, and buyers sign not to attempt re-identification. No method is perfect, so anything you can't risk sharing should stay out of scope.