Is it possible to do research on health data without violating the privacy of the entire population?