https://www.pharmaciststeve.com/protecting-consumer-health-data-privacy-beyond-hipaa/