diff --git a/management/commands/anonymize_data.py b/management/commands/anonymize_data.py
index 89e13c8..957331f 100644
--- a/management/commands/anonymize_data.py
+++ b/management/commands/anonymize_data.py
@@ -10,7 +10,16 @@ class Command(BaseCommand):
     Command to protect sensitive data during the beta phase, to prevent a right escalation.
     Phone number, email address, postal address, first and last name are removed.
     """
+    def add_arguments(self, parser):
+        parser.add_argument('--force', '-f', action='store_true', help="Actually anonymize data.")
+
     def handle(self, *args, **kwargs):
+        if not kwargs['force']:
+            self.stderr.write("CAUTION: This is a dangerous script. This will reset all personal data with "
+                              "sample data. Don't use this in production! If you know what you are doing, "
+                              "please add --force option.")
+            exit(1)
+
         cur = connection.cursor()
         cur.execute("UPDATE member_profile SET "
                     "phone_number = '0123456789', "