Many organizations have developed their own policies regarding data de-identification and/or anonymization.  For those organizations seeking guidance, the following paper may prove to be a valuable resource: De-identification Guidance.