legal and ethical aspects of health information management