Policy for maintenance of patient confidentiality