In the data warehouse side, it makes sense to use surrogate keys and replace all natural keys. I don't really deal with PII data, but even in cases where I get keys from other systems, everything is replaced with the data warehouse surrogate keys. Everything is cleansed and controlled by the data warehouse with signatures/ownership of systems so nothing is amiss. I feel this is becoming the standard at least in this space and it makes sense to me!