Realization of data protection in health information systems