A computer-implemented method for assessing a person re-identification risk in an application domain is provided. In the application domain, for each of a plurality of persons a corresponding personal record is stored in a database. Each record comprises a set of attributes. Each attribute comprises a corresponding attribute name and a corresponding attribute value.