AHIMA demands better PHR privacy protections