Privacy of personal health information for clinicians and managers