4 ways to better protect patient privacy