O' Reilley have pointed me to a very thought provoking article at http://radar.oreilly.com/2011/05/anonymize-data-limits.html
I suggest that you read it and consider what changes are required so that anonymous data is anonymous.