Figure 2
From: De-identifying a public use microdata file from the Canadian national discharge abstract database

Matching the PUMF against a population registry. This figure shows the process that would be used in by an attacker. The ID field is only included here to make it easier to see which records are included in each data set. In reality there would be no consistent ID field available across the data sets.