Abstract
The k-anonymity privacy requirement for publishing mi-
crodata requires that each equivalence class (i.e., a set of
records that are indistinguishable from each other with re-
spect to certain “identifying†attributes) contains at least
k records. Recently, several authors have recognized that
k-anonymity cannot prevent attribute disclosure. The no-
tion of
