Confidentiality and privacy in health care from the patient's perspective: does HIPAA help?