With the way the article compared it to donating organs, I figured this was a system for releasing information after death. In that case, the de-anonymizing problem is less of an issue. (Informed consent of this problem would still be needed of course)