Weak k-Anonymity: a Low-Distortion Model for Protecting Privacy