Confidentiality, privacy and security of health information: Balancing interests