Privacy Preservation by Disassociation