-concerns about inappropriate releases of information from individual organizations
-concerns about the systemic flows of information throughout the health care and related industries.
-Inappropriate releases from organizations can result either from
authorized users who intentionally or unintentionally access or
disseminate information in violation of organizational policy or from
outsiders who break into an organization's computer system