A recent South African court judgment on pseudonymized school examination results has quietly opened a new and unexpected front in global debates about data protection and health research.