Is EMR a threat to patient privacy?