. "Health care providers and other organizations have adopted additional policies and standards to protect the privacy and security of health records." . . .