And yet seems to have violated them (I've cited the specific section of regs elsewhere in the thread). But deidentification is one of those things people who don't freak with it often, even trained in the rules, always seem to think is easier than it is.