De-identification is not always enough