Security of the distributed electronic patient record, a case-based approach to identifying policy issues - Anderson, JG (Int J Med Inf, 2000)