University of Iowa discovers patient privacy violations