A survey of the requirements affecting the privacy, security, and control of health information.