very rare diseases may be an exception, especially in known geographic locations. that can become identifiable (and is governed by HIPAA in the US)