De-identification of Personal Health Information is a practical book. It's the marriage so to speak of policy and technology with some depth (ex. some equations included), but not completely technical. De-identification of personal data is an effective way to protect the privacy of patients, and is the topic of this book. It includes a methodology for risk management and some best practices for those who want to apply the concepts.
The Case for De-Identifying Personal Health Information. Understanding Disclosure Risks. Measuring Re-Identification Risk. Practical Methods for De-Identification. Proofs and Appendices.