J. M. Abowd, M. Stinson, and G. Benedetto, Final report to the social security administration on the sipp/ssa/irs public use file project, 2006.

A. Cavoukian and J. Jonas, Privacy by design in the age of big data, 2012.

D. Centers, . Control, and . Prevention, Public-use data files and documentation . website, 2014.

L. Cox, Linear sensitivity measures in statistical disclosure control, Journal of Statistical Planning and Inference, vol.5, issue.2, pp.153-164, 1981.
DOI : 10.1016/0378-3758(81)90025-2

G. T. Duncan, S. A. Keller-mcnulty, and S. L. Stokes, Disclosure risk vs data utility: The R-U confidentiality map, 2001.
DOI : 10.1080/09332480.2004.10554908

G. Duncan and R. Pearson, Enhancing Access to Microdata While Protecting Confidentiality: Prospects for the Future, Statistical Science, vol.6, issue.3, pp.219-239, 1991.
DOI : 10.1214/ss/1177011681

D. V. Ford, K. H. Jones, J. P. Verplancke, R. A. Lyons, G. John et al., The SAIL Databank: building a national architecture for e-health research and evaluation, BMC Health Services Research, vol.14, issue.suppl 1, p.157, 2009.
DOI : 10.1197/jamia.M2273

P. Ge´czyge´czy, N. Izumi, and K. Hasida, Service science, quo vadis?, International Journal of Service Science Management, Engineering and Technology, vol.1, issue.1, 2010.

L. Gill, OX-LINK: The Oxford Medical Record Linkage System, Record Linkage Techniques. Tech. Rep, vol.19, 1997.

S. Gomatam, A. Karr, J. Reiter, and A. Sanil, Data Dissemination and Disclosure Limitation in a World Without Microdata: A Risk???Utility Framework for Remote Access Analysis Servers, Statistical Science, vol.20, issue.2, pp.163-177, 2005.
DOI : 10.1214/088342305000000043

J. Gouweleeuw, P. Kooiman, and L. W. Dewolf, Post randomisation for statistical disclosure control: Theory and implementation, Journal of Official Statistics, vol.14, pp.463-478, 1998.

C. D. Holman, A. J. Bass, I. L. Rouse, and M. S. Hobbs, Population-based linkage of health records in Western Australia: development of a health services research linked database, Australian and New Zealand Journal of Public Health, vol.75, issue.22 Suppl, pp.453-459, 1999.
DOI : 10.1111/j.1467-842X.1999.tb01297.x

S. Kendrick and J. A. Clarke, The Scottish Medical Record Linkage System, Health Bulletin (Edinburgh), vol.51, pp.72-79, 1979.

S. K. Kinney, J. P. Reiter, A. P. Reznek, J. Miranda, R. S. Jarmin et al., Towards Unrestricted Public Use Business Microdata: The Synthetic Longitudinal Business Database, International Statistical Review, vol.53, issue.2, pp.362-384, 2011.
DOI : 10.1111/j.1751-5823.2011.00153.x

R. Little, Statistical analysis of masked data, Journal of Official Statistics, vol.9, pp.407-426, 1993.

J. Lucero, L. Zayatz, L. Singh, J. You, M. Depersio et al., The Current Stage of the Microdata Analysis System at the U.S. Census Bureau, Proc 58th Congress of the International Statistical Institute, p.2011, 2011.

R. Lusch and S. Vargo, The Service-Dominant Logic of Marketing: Dialog, Debate, and Directions, ME Sharpe, 2006.

J. Marley and V. Leaver, A Method for Confidentialising User-Defined Tables: Statistical Properties and a Risk-Utility Analysis, Proc 58th Congress of the International Statistical Institute, ISI 2011, pp.21-26, 2011.

C. Marsh, C. Skinner, S. Arber, B. Penhale, S. Openshaw et al., The Case for Samples of Anonymized Records from the 1991 Census, Journal of the Royal Statistical Society. Series A (Statistics in Society), vol.154, issue.2, pp.305-340, 1991.
DOI : 10.2307/2983043

C. M. Okeefe, P. Gould, and T. Churches, Comparison of Two Remote Access Systems Recently Developed and Implemented in Australia, Privacy in Statistical Databases PSD2014, pp.299-311, 2014.
DOI : 10.1007/978-3-319-11257-2_23

O. Keefe, C. M. Rubin, and D. B. , Balancing the research use of health and medical data with confidentiality protection

O. Keefe, C. M. Westcott, M. Ickowicz, A. O-'sullivan, M. Churches et al., Protecting confidentiality in statistical analysis outputs from a virtual data centre, joint UNECE/Eurostat work session on statistical data confidentiality, p.10, 2013.

O. Pitkänen, P. Virtanen, and J. Kemppinen, Legal research topics in user-centric services, IBM Systems Journal, vol.47, issue.1, 2008.
DOI : 10.1147/sj.471.0143

J. Reiter, Model diagnostics for remote-access regression systems, Statistics and Computing, vol.13, issue.4, pp.371-380, 2003.
DOI : 10.1023/A:1025623108012

J. Reiter, Using CART to generate partially synthetic public use microdata, Journal of Official Statistics, vol.21, pp.441-462, 2005.

J. Reiter and C. Kohnen, Categorical data regression diagnostics for remote access servers, Journal of Statistical Computation and Simulation, vol.9, issue.11, pp.889-903, 2005.
DOI : 10.1002/0471722146
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.485.8109

D. Robertston and R. Ethier, Cell suppression: Experience and theory Inference Control in Statistical Databases, Lecture Notes in Computer Science, vol.2316, pp.213-239, 2002.

L. L. Roos and A. Wajda, Record linkage strategies: Part 1: Estimating information and evaluating approaches, 1990.

D. Rubin, Discussion: Statistical disclosure limitation, Journal of Official Statistics, vol.9, pp.462-468, 1993.

S. Sampson and C. Froehle, Foundations and Implications of a Proposed Unified Services Theory, Production and Operations Management, vol.3, issue.2-3, pp.329-343, 2006.
DOI : 10.1111/j.1937-5956.2006.tb00248.x

C. Skinner and N. Shlomo, Assessing Identification Risk in Survey Microdata Using Log-Linear Models, Journal of the American Statistical Association, vol.103, issue.483, pp.989-1001, 2008.
DOI : 10.1198/016214507000001328

R. Sparks, C. Carter, J. Donnelly, J. Duncan, C. M. O-'keefe et al., A framework for performing statistical analyses of unit record health data without violating either privacy or confidentiality of individuals, Proceedings of the 55th Session of the International Statistical Institute, p.4, 2005.

R. Sparks, C. Carter, J. Donnelly, C. M. O-'keefe, J. Duncan et al., Remote access methods for exploratory data analysis and statistical modelling: Privacy-Preserving Analytics??, Computer Methods and Programs in Biomedicine, vol.91, issue.3, pp.208-222, 2008.
DOI : 10.1016/j.cmpb.2008.04.001

J. Spohrer, P. Maglio, J. Bailey, and D. Gruhl, Steps toward a science of service systems, Computer, vol.40, issue.1, pp.71-77, 2007.
DOI : 10.1109/MC.2007.33

G. Thompson, S. Broadfoot, and D. Elazar, Methodology for automatic confidentialisation of statistical outputs from remote servers at the Australian Bureau of Statistics, Eurostat work session on statistical data confidentiality, pp.28-30, 2013.

. Uk-data-archive, Secure data service (website), http://ukdataservice.ac.uk/ get-data/how-to-access/accesssecurelab, 2014.