Question About Anonymizing Users and GDPR

In this case, I assume emails includes/also means PMs?

From a legal perspective, can a user be told that the process of anonymizing is GDPR compliant or are the waters still muddy on this matter?