a subject cannot be identified within a set of subjects.

an attacker does not know if a given subject is in the dataset.

we are using pseudonyms instead of names in the dataset.

a subject name is not present in the dataset.