Legal and Policy Issues of Electronic Patient Records