as defined in the hipaa privacy rule, the right to patient privacy dictates and enforces the manner in which personal health records may or may not be shared among organizations or other third parties.