The statute says:
Information anonymized under this Act must be anonymized according to generally accepted best practices and according to the criteria and terms determined by regulation.
It is section 23 under the title “Destruction or anonymization”. When you get rid of personal information, you're either destroying it or turning it into anonymous information, so you can't reidentify.