These activities should use Pseudonymised data, that is, where fields that identify a Person, or Household, are replaced by artificial identifiers. These identifiers allow data to be joined up, but do not allow the Person to be re-identified.
Steps
Extract a set of data for analysis
Design a target data structure that is suitable for analytics, and extract data into that form.
The data should be in a separate analytics environment with suitable access and security controls.