Even if a single database may appear to have effective confidentiality safeguards, when several databases are linked within GIS, the "sum" may be less well protected than the "parts".