Statistical Confidentiality: Some Theory and Application to Data Dissemination