Patients' personal health information should be protected from unauthorized access, disclosure, or use.