FOIA exemptions protect data that could reasonably be used to identify individuals and would thus constitute a violation of privacy; but such protection of privacy is not extended to institutions, such as clinics or hospitals, which may have legitimate reasons to protect their anonymity.