Privacy metric ensuring each record is indistinguishable from at least k‑1 others.