National Institute of Standards and Technology, De-Identification of Personal Information (NISTIR 8053) (Dec. 16, 2015) (full-text).