Let's start with how it's very difficult to properly de-identify medical data: https://www.careersinfosecurity.com/patient-data-be-truly-de...