PAVLAD: Privacy and Anonymity for Very Large Databases