For more than a decade, the policy debates around informational privacy have focused on the fickle notion of identifiability. Companies and government agencies sought to collect and use personal information to deliver services, improve products and conduct research, while at the same time protecting individuals’ privacy by de-identifying (anonymizing) their data. Surely, by reliably unlinking personal information from individual identities, organizations could reduce the privacy impact of their actions.