Comment by londt8

Why not just anonymize the data instead? Not using foreign key constraint just for the sake of GDPR sounds weird.