Protecting respondents' identities in microdata release