Identifies the policy issues that lead to trust (cross-cutting issues, obtaining patient notification and consent, appropriate uses of health information, identifying records that belong to a particular patient, authenticating the identity of users, patient access to his or her own information, audit trails, and breaches of confidential health information).