Patient privacy: Can past lessons prevent future failures?