Research – Referring to users under GDPR

We have an internal knowledge base where the user researchers share their findings to other members (across all functions) of the team.

This knowledge base is open to all employees of the company, so under GDPR, we can't paste any links that lead to files that could possibly identify users.

Because research findings often get shared to people outside research, I'm thinking of other ways to refer to users, instead of saying 'Amanda' or 'Brian', would there be an easy way to create 'codenames' that aren't overlapping and easy to remember?

We have a lot of interviews and usability tests going around, so we often refer to individual user research data.

Any suggestions are welcome. Thanks!