HIPAA privacy rule and public health; guidance from CDC and the U.S. Department of Health and Human Services