It may have just become harder for organizations that fall under the umbrella of the Health Insurance Portability and Accountability Act (HIPAA) to de-identify their MRI data.

report from the Mayo Clinic published earlier this month in the New England Journal of Medicine found that commercially available facial recognition technology could be used to successfully match a patient’s de-identified  MRI scans to their photo.