Mention local regulations in de-identified data section. (#441)

Co-authored-by: Wendy Seltzer <[email protected]>

index.html

@@ -1659,7 +1659,8 @@
 Data is <dfn data-lt="de-identify|de-identification">de-identified</dfn> when there exists a high level of confidence
 that no [=person=] described by the data can be identified, directly or indirectly
 (e.g. via association with an [=identifier=], user agent, or device), by that data alone or in
-combination with other available information. Note
+combination with other available information. Many local regulations define their own requirements
+for data to be considered [=de-identified=]. Such regulations should not be read as a privacy ceiling. Note
 that further considerations relating to groups are covered in the
 <a href="#collective">Collective Issues in Privacy</a> section.