This research seems to show that two X-rays can be identified as being from the same person, rather than identifying the person directly.

However, I have no doubt that AI could easily de-anonymize data fully given enough data points.