Medical privacy act a must-read