A framework for evaluating the utility of data altered to protect confidentiality