Using the adversarially learned representation, de-identification models reach an F 1 score of 97.4%, which is close to the non-private system (97.67%).
the automatic pseudonymization approach only reaches an F 1 score of 95.0% at N = 500.