One year can also be extremely low w.r.t. a privacy viewpoint. Even assuming that anonymization is possible, a) who would pay for it? and b) it could make it impossible to verify the research (there are a lot of 'describe one patient' papers out there)