Health and human services' privacy proposal: a failed attempt at health information privacy protection.