Source
The FERPA regulation defining "personally identifiable information" to include not only direct identifiers but indirect ones, and any information that, alone or combined with other information a reader already has, is linked or linkable to a specific student such that a reasonable person in the school community could identify that student with reasonable certainty. This is the legal basis for the principle that an aggregate taken over a sufficiently small group is not truly anonymous.