https://www.sans.org/reading-room/whitepapers/legal/medical-data-sharing-establishing-trust-health-information-exchange-37657