A New Framework for Protecting Privacy in Health Research