This is a follow up question to Unlink profile from 2018 Developer Survey
The claim in the answer is that only a GUID connects the survey result to the user profile, and that GUID is not recorded.
It goes even further and claims:
if someone told us that the only way we could save Jay Hanlon from the evil Skeletor was to reveal the information that Jay provided in the survey, well, we couldn't save him. The only bridge between Jay and the information he provided was burned once we failed to record anything except for the fact that he successfully exited the survey.
Well, I certainly hope my colleagues will show more resolve than that when I'm stuck in a parallel universe, being tortured by a body-building skeleton.
Jay as received his Census badge at 2018-01-08 19:26:49Z. He must have completed the survey a few seconds before. This information is enough to narrow down the possible responses to a few dozens at most - even before considering public knowledge like country, education, or company size.
Further, currently about 26,000 users have received the Census badge for the 2018 survey (436 pages, 60 per page), and we know order at which they received it. For example, we know Brian Nickel and Julia Silge have completed the survey before it was published, and they would have two of the first responses.
Given this information, I think it is clear the public results should not include a timestamp (previous results did not include it anyway).
The 2017 survey result CSV did contain the column Respondent
, with an ID from 1 to 51,392. If this is the real order, again, we could have a problem.
So, a minor conclusion - please remember randomizing the row order before publishing the results.