National Research Council, For the Record: Protecting Electronic Health Information (1997) (full-text).