Operationalizing compliance with data protection policies

David Loshin describes three sets of policies required for ensuring compliance with data protection directives for health care.