We are still very early stages here, but we really like the Anonize system (https://eprint.iacr.org/2015/681.pdf)