The Safe Harbor Method of De-Identification