The disclosure of diagnosis codes can breach research participants' privacy