Introducing privacy in a hospital information system