Keeping data anonymous seems easy, but keeping identities separate is a big problem. Professor Derek McAuley explains.