Sharyl J. Nass, Laura A. Levit, and Lawrence O. Gostin, editors ; Committee on Health Research and the Privacy of Health Information, the HIPAA Privacy Rule, Board on Health Sciences Policy, Board on Health Care Services, Institute of Medicine of the National Academies