Data utility and privacy protection trade-off in k-anonymisation