Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information