Study: Better staff training could protect EMR privacy