You are running a mental health survey for a nonprofit in a small, low-income community. A nearby hospital offers to share anonymized patient records, and your supervisor is eager to combine the two sources. Every choice you make about review, consent, data minimization, and reporting decides who stays protected — and who could be picked out of the crowd.