Under The Privacy Rule The Minimum Necessary