Key points are not available for this paper at this time.
Before releasing personal health information for secondary uses, such as research or public health monitoring, organizations must de-identify the data they've collected. Several common heuristics are useful for this purpose, but they also have limitations.
Khaled El Emam (Tue,) studied this question.