Anonymity refers to a situation where the data collected contains no identifying information and cannot be linked to any individual participant or group. For instance, an anonymous online survey.
Confidentiality refers to the responsible handling of information that may include personal or identifying details. Where such information is collected, it must be kept secure and only accessed by authorised individuals.
Researchers must comply with applicable data protection laws, such as POPI regulations, and be able to clearly justify why any personal or identifying information is being collected. All data should be stored safely, and identifying details must not be disclosed in reports, publications, or presentations.
It is important to not make any participant identifiable. Never identify participants by name.
Wherever dealing with case studies focusing on a specific company, school, university, organisation, etc. (hereafter referring to all as organisation) avoid using the specific name of the organisation as it may result in a reputational risk to the researcher, university and/or the organisation if inaccurate results are reported or if the results shed an unflattering light on the organisation. This could, in extreme cases, result in legal action. In addition, anonymity would be breached if, for example, you use the name of the employer if there is possibly only a single participant per company.