Living in a world where the IRS will secretly leak your tax details to your political enemies* means I'd rather the centralized database not exist in the first

Living in a world where the IRS will secretly leak your tax details to your political enemies* means I'd rather the centralized database not exist in the first place ... at least, not without massive effort to remove personally identifying information. This is harder than it sounds. I believe Schneier had an article up showing how a person's lat-lon tracks alone makes them very easy to identify, if you already know things like where they live, where they work, etc. * well, they did promise they really didn't do it, so I guess it's okay then, because they wouldn't lie about it ... and I also believe 7 hard drives or whatever can simultaneously accidentally break, when they just happen to be the ones containing evidence under Congressional subpoena.