Evaluating privacy of individuals in medical data