Anonymizing set-valued data by nonreciprocal recoding