Remove rows containing private data

[TTitcombe]

The issue:
#7 introduced a function for removing columns which contain at least 1 privacy breach. While this reduced the scope for false negatives, it can remove a lot of useful data

Proposed solution:
anonymize should accept a boolean flag (default False) which, if True, would drop rows which contain a privacy breach