@Gargron anything included in a database gets leaked eventually because it cannot be adequately secured.
The old paper system was fairly secure. The occasional fire would destroy data but, at least it wouldn't leak it.
It was not impossible to access private personal data maliciously but, it was far more time consuming.
What is left after all identifying information is leaked? It's no longer viable for identification...