Comparison of personal information de-identification policies and laws within the EU, the US, Japan, and South Korea