Author demonstrates that removing all explicit identifiers from medical data does not guarantee medical record confidentiality. She examines three new software systems that do help maintain anonymity, but warns that systems' limitations demand complementary policies.