Stanford now has an excellent document on privacy and electronic records...