From a skim, it looks like their main point is that with 8 movie ratings, it's trivial to link two datasets (eg anonymized Netflix rating to public IMDb profile).

https://scholar.google.com/citations?view_op=view_citation&h...

https://systems.cs.columbia.edu/private-systems-class/papers...