A Two-Stage De-Identification Process for Privacy-Preserving Medical Image Analysis