Patient Privacy, Consent, and Identity Management in Health Information Exchange