Shared expectations for protection of identifiable health care information