Anonymizing with data generalization