“…Re-identification of participants based on scan data had been considered a remote possibility, which motivated the creation of defacing algorithms (Alfaro-Almagro et al, 2018;Bischoff-Grethe et al, 2007;Milchenko & Marcus, 2013;Schimke, Kuehler, & Hale, 2011). Such re-identification, however, has recently been demonstrated to be feasible (Schwarz et al, 2019), which now renders defacing mandatory for publicly available data. Moreover, two recent developments further complicate matters.…”