An operational measure of information leakage
t-Closeness: Privacy Beyond k-Anonymity and l-Diversity