> FDA may inspect study records, for example, to assess investigator compliance with the study protocol and the validity of the data reported by the sponsor
PII is not just name and SSN. Using all the demographic information recorded for each participant and open-source intelligence, you should be able to uniquely identify them.